66bfbe8286909633d086ed59a5c277f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66bfbe8286909633d086ed59a5c277f0_JaffaCakes118
Size

276KB
MD5

66bfbe8286909633d086ed59a5c277f0
SHA1

78e15c25b64f93d7f86e7f4ce8a2a3a074eade21
SHA256

48769f9a7e545eeb6485e52fab6ab7fe2014d7bc8a3d39c02cba85840626f75e
SHA512

460abe5d7afb4a6df3df3afa40a6e15f824ccaefecf4d3c4edfa6d9932354d61ff1e789246d82b73f0cf0bc12895cb20890394b35a5080c5e189e38fab6150e4
SSDEEP

3072:w+6HPHxJqtiEbBIn6VVGx+d5AMZQE4sNXrdDHXL:1mX8dtRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66bfbe8286909633d086ed59a5c277f0_JaffaCakes118

Files

66bfbe8286909633d086ed59a5c277f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5e2a91898910f8b23bb87d2ccb4afc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ