6a79d0f8dec15daf0a13ed18a0a19af5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a79d0f8dec15daf0a13ed18a0a19af5_JaffaCakes118
Size

68KB
MD5

6a79d0f8dec15daf0a13ed18a0a19af5
SHA1

0d7f70ed3825d515fdbf6c900fad32d6df06710c
SHA256

d275340bf5f743815465d58b7911c02df6fccfc30524903bc0683e686d37bd63
SHA512

e0fa3cff03421039071d9f53de3b95c76692159b8b3c1cbf8cce5a0686225ea602cd0468ce733d86aa798e112f8f66d51266a4c84c6fdb687ba8096b86104810
SSDEEP

768:7BxzMHKLH8aiModjxrixRINHwqquvH8vPzHC0W:7B1BLshjASVquvMPhW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a79d0f8dec15daf0a13ed18a0a19af5_JaffaCakes118

Files

6a79d0f8dec15daf0a13ed18a0a19af5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

942abe0283eea0388ae00a58e1108761

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord536
ord645
ord681
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE