607e9ee94ab80ce40212a08b14356843_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

607e9ee94ab80ce40212a08b14356843_JaffaCakes118
Size

84KB
MD5

607e9ee94ab80ce40212a08b14356843
SHA1

12ab4996cef602bccac794dfd4dc7921abb50fab
SHA256

4f85a7a2db638520013403dee50757c8e419a63c916fe4f02dfad820a03de351
SHA512

ba670c59de8798d1d2b6684294bf7f6fc1f3cd192d7c503d85901b5c530871e94e98d1db058d3ce5cb91274f264d42d59e39a192461f2a71f3c13e08937dffee
SSDEEP

1536:1bzvwNQ915gT1Bv/J24vpPQCUwljFf+NDHR:1O21qE4xPjtl+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
607e9ee94ab80ce40212a08b14356843_JaffaCakes118

Files

607e9ee94ab80ce40212a08b14356843_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3718be4ca963513b7f4189b38be4061f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord644
ord100

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ