66216032f91776100904aea0df63552d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66216032f91776100904aea0df63552d_JaffaCakes118
Size

248KB
MD5

66216032f91776100904aea0df63552d
SHA1

c870da3850f8b95b0990ac23ccc34b18ed69380f
SHA256

5c375ecec27f138a91917827acd5835689abde63b63336551050eb27ded619c6
SHA512

33d32d162895130f16d9aca68232ca63a16bed8954d999dbd44b6ad163fc0e05b7cf3f16a10dd2c0ebdd7bad54a856e2d59b8bb7075203353fd6a24f6ae37307
SSDEEP

1536:jMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wm5LcM91xr:IX0e1FB/DpKjCLHAm571xbH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66216032f91776100904aea0df63552d_JaffaCakes118

Files

66216032f91776100904aea0df63552d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c83d9291036687b62b8ae1aa85bdc856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord681
ord100

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ