6406671fbad5dcab0969315aba76d561_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6406671fbad5dcab0969315aba76d561_JaffaCakes118
Size

224KB
MD5

6406671fbad5dcab0969315aba76d561
SHA1

5f9624ed1ccdaea48e9648719b139555088b1395
SHA256

fedc037ccb48669584c49750f70c4447f8434c4964f5566a993c497a99dd9c5e
SHA512

fa7fdf87bdb0cafa600958b2f3a0190c540a56b8b1414ae9e3e74386757e6073992a2bbdfa335958efdeea0656ac3fccc53215e05c502aec0813b4f18a6a72e3
SSDEEP

3072:1hKloQSrkKgRENEI5apGTwQqVMTW0hiJDeaCcz8VMt5cRDmNlQwKOzoaqTmY6AWU:yz8MtSGRxwyb1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6406671fbad5dcab0969315aba76d561_JaffaCakes118

Files

6406671fbad5dcab0969315aba76d561_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7dea642127d9735a3a9dead67823cef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ