61bb8c70403c3ad15ec40fe2ad99c3d3_JaffaCakes118 | Triage

Sharing

General

Target

61bb8c70403c3ad15ec40fe2ad99c3d3_JaffaCakes118
Size

868KB
MD5

61bb8c70403c3ad15ec40fe2ad99c3d3
SHA1

2093bda496cda2c07868babbc542ef17e3748317
SHA256

f15d64ffaff72f67d8d1c5937e300aa06fc71649ea3f6908f7ac2dc2fee7959a
SHA512

983b1716d1ad5bfe6b78d5902c2f8089431e23014d944cfac95555457703dfbf3415850c6ab8b288dddf358ee94af72337532e84adce32d13a46a47235a0f2c4
SSDEEP

3072:5kXOf+Qcrq+JYt/aXcGwZhQIhQYyDWJIFGVtL81uHG8evaFZDhY8Ema5f2vL8RZB:O8VZWma5fBZ1DT5fvmWVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61bb8c70403c3ad15ec40fe2ad99c3d3_JaffaCakes118

Files

61bb8c70403c3ad15ec40fe2ad99c3d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e61516be1ab5ceb051a5d49c89c4856f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 692KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ