620d39e26bc34da09fa729475b875d73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

620d39e26bc34da09fa729475b875d73_JaffaCakes118
Size

24KB
MD5

620d39e26bc34da09fa729475b875d73
SHA1

3af2ae0f71839cb14a45cd92bd00a37716acff06
SHA256

2a565bdae3f6e67e4e8c37ec8e1f33689a2718923ee476a44a774663d668b592
SHA512

a70303b76b6b254e3d0f3f3c8eeecda7657d228824db208d45e942d15a32f3ee810b1b594747e84c4eda4b744f4afb9ed4cf4fe736c0f4d46bef35157f2be2b0
SSDEEP

192:nLKUptX+cp+wiacmK1C1QLZeUTImuSiDYC4FFo0YBzYBMnLq8/KUpty:nLDpXi1jYnMye8LB/Dp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
620d39e26bc34da09fa729475b875d73_JaffaCakes118

Files

620d39e26bc34da09fa729475b875d73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

820499ec62b6cd62f60da03c1faf5270

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord520
EVENT_SINK_AddRef
ord529
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord648
ord681
ord100
ord613
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ