68a0cb0b6691f8198c46bb9ac70bd0fe_JaffaCakes118 | Triage

Sharing

General

Target

68a0cb0b6691f8198c46bb9ac70bd0fe_JaffaCakes118
Size

395KB
MD5

68a0cb0b6691f8198c46bb9ac70bd0fe
SHA1

b998de2570d5c23c04a88c13d8e8e9ffb8336b31
SHA256

241fed92c24be70e98d440d48de42c8e751f58392c873d05277b77171bf4fdf6
SHA512

452dac3d857b01e90c425063c34633ec4981f83417dc1ec591b6af82e8e56785388271cbe6f6d24bd0260d8ba99aec18468d2b586d454ce0c2c8ef55bc409d77
SSDEEP

1536:Fpm+89mja826//NC7KknaRKxQw0GbkmXwQEm:FB89mjq6/lCuBRKm76kwwa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a0cb0b6691f8198c46bb9ac70bd0fe_JaffaCakes118

Files

68a0cb0b6691f8198c46bb9ac70bd0fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cd58aa0d7710e58f274446be170647b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ