601a3754cefea84333a4fd7748fac3a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

601a3754cefea84333a4fd7748fac3a1_JaffaCakes118
Size

36KB
MD5

601a3754cefea84333a4fd7748fac3a1
SHA1

04a20d2637a496cc03929b2c07b6c9077f4e5063
SHA256

35252d509e90fc4e2313c48f5bf1a8b4343083ccbdb6100b8cc6e81450bf09db
SHA512

3b5df5a28541d3161ddf31a0fd3fdad186e8e1b989e6b8a4d9a57ec4fd35b68c863d5c95fbcc17712803f7f58e3ea6f0e4a9eabb27c4458081b5366146d6d14e
SSDEEP

384:1pKDpKDxKDWS0rlniku2fePrSaRlW5ObKDiKDeKD:13brlmPXSO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
601a3754cefea84333a4fd7748fac3a1_JaffaCakes118

Files

601a3754cefea84333a4fd7748fac3a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

beaf80a83544f27384525e4aad07b5f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord593
ord594
ord520
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord537
ord645
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ