63801266cf545fbb8cde531402a921e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63801266cf545fbb8cde531402a921e7_JaffaCakes118
Size

32KB
MD5

63801266cf545fbb8cde531402a921e7
SHA1

4b78451ea1ad9a7f64a2066f2324983246cd6124
SHA256

b2d0df62559e9c6ca196aaa2922eb3ad8136504510ba669cefde3c9c14cda2cf
SHA512

618b02caee6a8a68c5d498c2bb1ac2a40160318c4c98c4e16654020f7c6a80c693502fc8e2fb13f7493e6901b203b8fad0983b78e8031f781dd4f02178978cb0
SSDEEP

384:kS377agUFqOZwJVtEsBn/Xs7vYhPxGtjvbOS1VptD8:VPUFqXLtEcAYhPc9vbOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63801266cf545fbb8cde531402a921e7_JaffaCakes118

Files

63801266cf545fbb8cde531402a921e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a19ff2de29435f891ee4496369730a6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord537
ord648
ord681
ord576
ord100
ord616
ord617
ord618
ord619
ord580
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ