65f3647c1fdfd197beec7ebd6292a228_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65f3647c1fdfd197beec7ebd6292a228_JaffaCakes118
Size

268KB
MD5

65f3647c1fdfd197beec7ebd6292a228
SHA1

b542755b1b72b548f393ce855d51b1bac426d1c2
SHA256

02d00589596b448bc79d371db4b8e1c407f0ec9e673aebaa513461f23f688071
SHA512

7fe8f5707d25fb1237a299e0cd4c8a56af920c77cb02cd419345bcffb905c194db659183805524f3b81c2af7321775ea4c8104677117570ead16d8d8ce67f5fb
SSDEEP

6144:6ThxVF/vPu4KzZEInNPtOmKaXThxVF/vP:kzD0+sNPDPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65f3647c1fdfd197beec7ebd6292a228_JaffaCakes118

Files

65f3647c1fdfd197beec7ebd6292a228_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef69ecd3cabb7ef3b7cac33e8b72b513

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord517
ord519
ord593
ord594
ord595
ord598
ord599
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord714
ord608
ProcCallEngine
ord645
ord570
ord681
ord576
ord685
ord578
ord100

Sections

.text
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ