6912d6f28c4d707d282be5300f97bae1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6912d6f28c4d707d282be5300f97bae1_JaffaCakes118
Size

157KB
MD5

6912d6f28c4d707d282be5300f97bae1
SHA1

330ca37e27c0df04c123b0f4b797fc224b725ac8
SHA256

1de83f5aca2badec1f30bf672ecc786704c4ff75c563f0dbc2442577b06c2750
SHA512

a7eb01602867cdad9f9eec9d7529840167570ecc188f4c2135d54556889243cebeff69453054f43494da64f41f0002ad5a3866c53334e23ee77a3a11d199ac0b
SSDEEP

3072:Y2pYwciNqMNQKPWDyDI0fkJltZrpReFX3:YXifNSDyDIkcthp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6912d6f28c4d707d282be5300f97bae1_JaffaCakes118

Files

6912d6f28c4d707d282be5300f97bae1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82bce5d2d3e222a65dd1a45884a05b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ