6714ff04a28dd18bf47b73e746740d99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6714ff04a28dd18bf47b73e746740d99_JaffaCakes118
Size

20KB
MD5

6714ff04a28dd18bf47b73e746740d99
SHA1

9a4a8a07d5fecc6b9503d4a25db88f16ec268e31
SHA256

972fca6dcf97b137308bdd099d410d87d257b15dc8ed10d0b80980d83b25fde1
SHA512

0fe8c82a5afcf402a493e3727c7cd84d3faa2cf2742e869376c3c61cc364c7c7076f5cff12124cdeeea23433dc0bb2d226f014bf67783b204f70027cdac6631b
SSDEEP

192:yLOlG+GIBBmIJlG77t7Z2x0aIXZX4yOI1zmlEdHdXX75XD6/0INegqm1+:yLOlUyJlG7j26XZXvaEPnlDHIcgqg+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6714ff04a28dd18bf47b73e746740d99_JaffaCakes118

Files

6714ff04a28dd18bf47b73e746740d99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e132f043ba3909366f2be45caaf1c17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ