6536cfd805d6cf632ce7655bb5ce30ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6536cfd805d6cf632ce7655bb5ce30ac_JaffaCakes118
Size

284KB
MD5

6536cfd805d6cf632ce7655bb5ce30ac
SHA1

e66f8f96041d02611a84ec2c2f15802c524d5774
SHA256

f7a5299a948efd141bc311954051a2266a91d5794a63d526d29095a7377291c8
SHA512

cd733cd222367555af3c33de9a4e0585bc805f12682f5626c8142402ab1cd370cb89e2f7c6f3773573c2b41cec22345d788ce4bf539e2fef65c5f4ede24aae7a
SSDEEP

3072:J3yoFuLkWLpj0EzTRd6uAaquEfagLkWLpj0EzTRd6uAaquEfJwC5G1l:ZAkw026Na0ySkw026Na0xwC01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6536cfd805d6cf632ce7655bb5ce30ac_JaffaCakes118

Files

6536cfd805d6cf632ce7655bb5ce30ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20a71dd9b700f9433df69bb2fa9013d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord713
ProcCallEngine
ord644
ord537
ord645
ord573
ord100
ord617
ord650
ord581

Sections

.text
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ