694362c5929d05ce0b7dea7aa45ac548_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694362c5929d05ce0b7dea7aa45ac548_JaffaCakes118
Size

565KB
MD5

694362c5929d05ce0b7dea7aa45ac548
SHA1

fcaead924ab8e131bea1970e3adcea6d92ca2f51
SHA256

e7246249c40a073a6d888f1746b537a42143f4b48b79a36d19b57702a51e16df
SHA512

319521923ea6e2a04615961426d38e77a4c96d2bd5e1ef251f4240b933a5a920c21fddd7525c3549b1812cec29cc21bbefd2a0c5f8a97705ef41b288fd27ea2b
SSDEEP

12288:l+JTVbBH0Dssmeujj6KihTPeGYBVVZD0U1+:l4BH04JjwhL9CNH1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694362c5929d05ce0b7dea7aa45ac548_JaffaCakes118

Files

694362c5929d05ce0b7dea7aa45ac548_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40b64f19d70ee70c5c4e81cc2102a99d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord681
ord100
ord619

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ