64f6aaf77c4d926479935d1d4a09ae82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64f6aaf77c4d926479935d1d4a09ae82_JaffaCakes118
Size

24KB
MD5

64f6aaf77c4d926479935d1d4a09ae82
SHA1

50e186ba30bd3fb24debf85ad42c0742724dc6cf
SHA256

e33ff6ba4c82fb5f5366d2285b1959e16a4fed838e47d2115888a1a8248d615c
SHA512

f582af928fef2dfa9cb19fc7cb352f8eafade0f64ea774448fb64f0648ac301a92d7df52ca8a131292d4e001631609aa2bdd710ce0b645f3b6bde5e21d4732c5
SSDEEP

192:CM+EX1gvd1VTTLzKGGQMFhgHAmqVsqPNszv1f+eVp8LPB959W31c99ucJ5KQkehI:C8X141w9gGu1+eabtbKQxzTEXCE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64f6aaf77c4d926479935d1d4a09ae82_JaffaCakes118

Files

64f6aaf77c4d926479935d1d4a09ae82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef3e603f11a1124fd4d7e9761c768c1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ