64a956b77a62e1042fec938ee00a7375_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64a956b77a62e1042fec938ee00a7375_JaffaCakes118
Size

303KB
MD5

64a956b77a62e1042fec938ee00a7375
SHA1

c8673816b8c2404fbfe5962212a8527d3ae33832
SHA256

3b76c428b00e85ed3d6d7e84168913a12597d1993efc2a79e4cd3149fc8e69fc
SHA512

f5fa6c34084e015bad210e1cc3c8221f3d1b768763c5a39353db7ae9ed684e231f6fa951a04a84739d77c527491cab1cf2463ae3d951286219d0bb91b814f127
SSDEEP

6144:Ao8lObmf+J4LqPbSh6OYAfTfYTqIDLtXX1bZFH2DAUL85eZt2T:Ao9bMxqDy6OfrATbDJXXxnH2DA7uoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64a956b77a62e1042fec938ee00a7375_JaffaCakes118

Files

64a956b77a62e1042fec938ee00a7375_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01bc1f62c7c3666eaf1a8b8d5f7c4d1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ