6a5404881c30735d4fe9ed7504b93e1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a5404881c30735d4fe9ed7504b93e1a_JaffaCakes118
Size

24KB
MD5

6a5404881c30735d4fe9ed7504b93e1a
SHA1

f59bcd7157fe306fa7ac2c2a7409fff309cb79e5
SHA256

3e183c690c7bec49839d94ea70b7b421e2b2371729e4ede96f1f0c946fec0db5
SHA512

da14afcd702e8606899b2f97836404abd7e17aedbb978f2b86ea2109bacb4e1dc385a796ac7f0a96375d55d2280d5328042f6ce5542547b10d84822f4d264e7f
SSDEEP

192:Uytt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:UyttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a5404881c30735d4fe9ed7504b93e1a_JaffaCakes118

Files

6a5404881c30735d4fe9ed7504b93e1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ