63235c872dd79a4d77f318608f5d68f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63235c872dd79a4d77f318608f5d68f3_JaffaCakes118
Size

380KB
MD5

63235c872dd79a4d77f318608f5d68f3
SHA1

64721751b218c18dbcd51ee04deffc92a2fb73e3
SHA256

3280158442b3c4a7f00e6c31b408b9b9db5daa70c416f82097ae74ec7ff3470e
SHA512

eb04db94a3a01b9bd859d62085f1e17f64fd654b6ffede6089d1d4467cf6927b9175937e988d8c85f4a98259defa7309b15e33d9b154f671e7fcd9e303a9ced7
SSDEEP

3072:SjtpmjwgJlBJhyO7D6cdy3+P+kCMT2GUAFxfr2i1oCc8xzKzJMG+UUXt2n/M+mrh:VPDKEt2n/M+WJ/04KLBc1KLygqD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63235c872dd79a4d77f318608f5d68f3_JaffaCakes118

Files

63235c872dd79a4d77f318608f5d68f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59cd77e43b6f00cdc07c0fedbb802386

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ProcCallEngine
ord644
ord537
ord573
ord100
ord619

Sections

.text
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ