61fcfd65f7d74f28366b7faf7faaaa85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61fcfd65f7d74f28366b7faf7faaaa85_JaffaCakes118
Size

20KB
MD5

61fcfd65f7d74f28366b7faf7faaaa85
SHA1

a73f4874ce263f39ff0a69bc21386f5f21e893b5
SHA256

d8026255194c1c592deba25fdd9bc1e0fc13869d6f148d2a3ac19ccff05140b2
SHA512

11782a09b90c652eb531559419c23db8294eaa58ca8ca2d01afe342e13dfab0d3b354b039cb9c798033cffe047e1e7589e793b087fa5f959b6fc20260e66ba4d
SSDEEP

96:IHNuiZJS7w1yokKH9CL/SacM8Mewl/GlKo703ILfILHJfYBJCm6OMICeAwKoXvu5:EtE8bH94/S97MT/L20fYxbDs3NZXEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61fcfd65f7d74f28366b7faf7faaaa85_JaffaCakes118

Files

61fcfd65f7d74f28366b7faf7faaaa85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf365bb1810635750cead26965f9e79c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord598
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ