61b85af36220adaae9c13e3b1e494abb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b85af36220adaae9c13e3b1e494abb_JaffaCakes118
Size

684KB
MD5

61b85af36220adaae9c13e3b1e494abb
SHA1

6d18430bc88000a3102bb4753eea01e7187f363a
SHA256

cd6dc662b803fc077d66fe6d066444aca4ae62b1fd986ad69b108691008c72cf
SHA512

62ea3ad0420cbe8b6b9bf3cbcb8d2cf5ed05e848a2f5fa0d664369004fe22b7482ea9f3c4a4fc32ee5a4fd1fc896e390b4574ea5510e662e5a3dff56ba0f17ce
SSDEEP

3072:ZSXGTuyCYpYfPUerPXLcn95AeAwVeipx45usD1a8c4Rb9U/feHS5RI3vJtex4SJI:o+CRbBJtCeu+yI/1/K+f+yZCeVzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61b85af36220adaae9c13e3b1e494abb_JaffaCakes118

Files

61b85af36220adaae9c13e3b1e494abb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2255a0c6c5ac9f22cab3b2c92150115d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord516
ord628
ord665
ord593
ord300
ord594
ord595
ord598
ord599
ord306
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord571
ord573
ord681
ord685
ord100
ord689
ord616
ord617
ord650
ord581

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE