6428acc97b2dba84a7076d08bd10be8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6428acc97b2dba84a7076d08bd10be8f_JaffaCakes118
Size

248KB
MD5

6428acc97b2dba84a7076d08bd10be8f
SHA1

36b216163092b096291d50a82d48136399c5faa6
SHA256

58792d664b0780703dc34690b989b98f0a49c48e34708e55b2f633490e5411a3
SHA512

04c5be95cbebb4fa24df9a506599b447966d53bc1ca6c255fef90fd365aeb7c937a79a0a3dfab8e2b19187e7c6e1fb0b6e08ab0bd372cf45c1b7214b774b261d
SSDEEP

1536:5MJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wm5LKqhu2e:+X0e1FB/DpKjCLHAm5ebyG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6428acc97b2dba84a7076d08bd10be8f_JaffaCakes118

Files

6428acc97b2dba84a7076d08bd10be8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45d697ab9ae1f3ac41938cf549d7447d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ProcCallEngine
ord644
ord537
ord572
ord100

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ