68fdd9621e45d9b7f33313312e75d698_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68fdd9621e45d9b7f33313312e75d698_JaffaCakes118
Size

24KB
MD5

68fdd9621e45d9b7f33313312e75d698
SHA1

6e01443d39928f3847b423dbe51a1b82bea4feca
SHA256

24467944c79b7f1b0f65b7cfd2e8aa80a335647220a38194e2b4692d5e3c49c7
SHA512

5cc4c668568dd738f436852dc1f8da44f4016fff1495d2ef98c29471a4c8094369b81047236de8c96fad5ee2c9d6aad20562e0f4a6fad69c880f404d7b44b717
SSDEEP

384:2LO2UyJlG7jA6XZX9aEPnlDHIcgqr1t4lbEB:2RUyJAvA6XZX97HtqbEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68fdd9621e45d9b7f33313312e75d698_JaffaCakes118

Files

68fdd9621e45d9b7f33313312e75d698_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e132f043ba3909366f2be45caaf1c17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ