61ebd5ce15694162577156e3d3db6fe9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61ebd5ce15694162577156e3d3db6fe9_JaffaCakes118
Size

68KB
MD5

61ebd5ce15694162577156e3d3db6fe9
SHA1

0462dc61e4dcba55781ed1653586045914ff3489
SHA256

5e8321c8e0c1009f069d21c432f704cf8cc4d1a49eea765625535a5b2b0a493c
SHA512

df2a4172f68fad7f55b976ea8b4a7ba1964d683d213da9ea32ded93ce37ab71c1cbcbb9906db24bccafa6a35ae0e26700e34dfb4ea0e5f6b6aa86e9c039bf729
SSDEEP

768:yRAVQQar+17l3SflzAYdj1sOjZKVQcfUs3stKIbHHon4zUuNUb1JK:k+17l3SflzA6TCn4zUuNUb10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61ebd5ce15694162577156e3d3db6fe9_JaffaCakes118

Files

61ebd5ce15694162577156e3d3db6fe9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6da81217adabbdcd3f5088c3b60933c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord518
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord645
ord570
ord648
ord573
ord578
ord100
ord579
ord689
ord612
ord617
ord619

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ