625dcf230abc9634b20294e07690c93d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

625dcf230abc9634b20294e07690c93d_JaffaCakes118
Size

384KB
MD5

625dcf230abc9634b20294e07690c93d
SHA1

bc0a584c9f208e9eedb8ca304d0b1e636ec95c3a
SHA256

27b712fcb2bddf7a04409bb31a29df07569748c4794ba79ec86d429e586c1d18
SHA512

be757f807fb697669901b0eb465f2cce4bcd72da15bef8735e7672477a62ad03d8f9d0578445ac6e77223413ae68215035273a52ef1eb6a104d39430847cf997
SSDEEP

6144:foiF8WpUBgC+UODy5jkCYTy0uQtPJrVm8qgOvdTBnR:fowCsymCN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
625dcf230abc9634b20294e07690c93d_JaffaCakes118

Files

625dcf230abc9634b20294e07690c93d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4b4608d5fdbabc9a3bc5ad22173b46f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord662
ord593
ord595
ord304
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord607
ord714
ord608
ord717
ProcCallEngine
ord537
ord647
ord573
ord681
ord685
ord100
ord612
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 368KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ