687e1fb64cf4cffd7c35449352587284_JaffaCakes118 | Triage

Sharing

General

Target

687e1fb64cf4cffd7c35449352587284_JaffaCakes118
Size

96KB
MD5

687e1fb64cf4cffd7c35449352587284
SHA1

7ac1f522cfb22c3175e51ff4af2b419a7e9a473b
SHA256

9c25b7e05506a0b4846461ceb03beb33a874950bcb924955d1b6a3ca28bc4d6d
SHA512

91d22118ba77ca62a45306c5c9ad19c5965bc07a8ca2707f1d917bbee8c5d484135082163336c7b38e82a3c81aaee9e9a5a4ec28fecd7d49146528cfe0829dd6
SSDEEP

1536:znVv8RzTntTXjzoIJHVhDxZiqt6BIRhpNk:znVvIz7pYoHVsqtxjk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
687e1fb64cf4cffd7c35449352587284_JaffaCakes118

Files

687e1fb64cf4cffd7c35449352587284_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c659e4e38a0004e6e777a025fe7b19d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord660
ord558
ord593
ord595
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord534
ProcCallEngine
ord535
ord537
ord648
ord571
ord573
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ