65e7bb198ffedec3dfed2fe05b812c0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65e7bb198ffedec3dfed2fe05b812c0d_JaffaCakes118
Size

28KB
MD5

65e7bb198ffedec3dfed2fe05b812c0d
SHA1

3e68254b2a86ce77135d292acee5fd945330b90b
SHA256

7fc134aeba015db1f126e4ce98bf5a7195cf8f849a8eee7fea84a8a8d4a93e8a
SHA512

3d033bbb7138ea541762757d1e7ff90890f74b65e90c6ac0e777a74b17b0374b75ebb799358d6db01944620acdd3d4abebec9da2039c56a954b8a566c139beb2
SSDEEP

192:BU2+POvvWCm6TfoXvv48UDiiN8Ey0GDTQh047VOX7bQ5oKila2CWWHY9utRYgvs3:BUNLh/vXgiQpViwLilxCWWHYYtRGKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e7bb198ffedec3dfed2fe05b812c0d_JaffaCakes118

Files

65e7bb198ffedec3dfed2fe05b812c0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7825319ea1befbce6eeaa4e8702e10a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord519
ord595
ord598
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ