675669e54dd3400c336b733bd6fe08a6_JaffaCakes118 | Triage

Sharing

General

Target

675669e54dd3400c336b733bd6fe08a6_JaffaCakes118
Size

780KB
MD5

675669e54dd3400c336b733bd6fe08a6
SHA1

cc3905085c690112db0fe467610f7eda822745ea
SHA256

741a94a7746de8476257f535f28cf8ca1a88c4c7cfe7cd299878169a1e859c78
SHA512

6b16c7dbcfbab0ac94ad09685d2dfd7acb45595e11fe8a25e798c17f37f60bca1e946dcc648a7af25cf222c9189535256bde0e9a4b9b76950a78237c695b9f34
SSDEEP

3072:g/Qf9bkjOcqCksRp9IILZ9U652V4l4aAeHjw68Ywajih0aU4n5Ne5kmnvih0aUSJ:aJXjUEFPHFPwjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
675669e54dd3400c336b733bd6fe08a6_JaffaCakes118

Files

675669e54dd3400c336b733bd6fe08a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae4a4418d7e052a4c797fed4c284755a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord537
ord572
ord573
ord100
ord619
ord581

Sections

.text
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ