6344f70a1d78543ee9607c7d17488cd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6344f70a1d78543ee9607c7d17488cd2_JaffaCakes118
Size

58KB
MD5

6344f70a1d78543ee9607c7d17488cd2
SHA1

4dd161ca060ed7e7aa5386dfa4d8b1ada2fcf5d1
SHA256

4d4fc008683e314ced97562fa1ce3f5bbe92ee7e18fcc243aa495cebfcb6b2bd
SHA512

83beb9faa240b9da25757328c9a36cce9e6902ed29d2f0f7369a268be4feb898d668e396650fd64c61076a290702a54239b343fa9d56365ad1457a7f2bb375f3
SSDEEP

1536:PKfo4SiB4GubpuWu32PyeAG+mOWeurnZeByWk+WJ8owPuOX:Px4erZeByWk+WJ8oEFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6344f70a1d78543ee9607c7d17488cd2_JaffaCakes118

Files

6344f70a1d78543ee9607c7d17488cd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38a3c608f3eef494e3281a7c17c35169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord531
ord716
ord717
ProcCallEngine
ord537
ord645
ord648
ord570
ord681
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ