669571d1b5659397e23d5aa3d6d7c50b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

669571d1b5659397e23d5aa3d6d7c50b_JaffaCakes118
Size

440KB
MD5

669571d1b5659397e23d5aa3d6d7c50b
SHA1

b8915076710387f36b9b8b0096a0d9d9072eb304
SHA256

58fc25b5e48499292f6f25b83cf8ae1af0359940d29ccb89a5da16d503c4d2dd
SHA512

096c97947a1a69af8d862467e9a3c11bbda823641a7c7bc8900554e2d395c932b7b3842dc94e5bb0f2df30169d9ca09e900c7f7a7e86a9dff22c2466fc5f8e68
SSDEEP

12288:L5IolcuXsQVBKh8dgn73VrGR5lZOayGPfcJpO9oyq:L5xccscjdgRrG3l8O0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
669571d1b5659397e23d5aa3d6d7c50b_JaffaCakes118

Files

669571d1b5659397e23d5aa3d6d7c50b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d2a1f90feedde9257af01be3db067aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord587
MethCallEngine
ord516
ord666
ord593
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord575
ord100
ord617
ord581

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 384KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ