61f86fded121891485c611ad1a8e4e85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61f86fded121891485c611ad1a8e4e85_JaffaCakes118
Size

28KB
MD5

61f86fded121891485c611ad1a8e4e85
SHA1

9ac83bdd06d818abb2e7c31f166dae4bc692d989
SHA256

13e2ca43efd22b883036baeb6ed931eb14e93f805c542c33bc5c2640b181bdb5
SHA512

22d9c214f268e53a2ef1a34117aad1d0222a3579c481638b8a5348e7119605900bd230226bbde027483f32de93fa87d0863ef4575266dc7bca1868ec1c3eaa58
SSDEEP

192:Inhd1Ehd3DVUFMCQKHvT3cbyS4VnbF5D4JPmNHZOg9qU8TdXGKSxxlTSUNSA1:K+dzVU+CTHIrqbF1U4Z7IU8ThGKSrlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61f86fded121891485c611ad1a8e4e85_JaffaCakes118

Files

61f86fded121891485c611ad1a8e4e85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55905d1ae6348de53612656acef49f23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord666
ord669
ord593
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord576
ord100
ord616
ord617
ord618

Sections

.
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ