6afaef159dfa7cb08268a08ef25f429e_JaffaCakes118 | Triage

Sharing

General

Target

6afaef159dfa7cb08268a08ef25f429e_JaffaCakes118
Size

20KB
MD5

6afaef159dfa7cb08268a08ef25f429e
SHA1

abb5f915e6815d112c8676084e6c87acbe7212cd
SHA256

bb983dc2eae71a5260e4bfc74bc5240629a2ce3413f867ae044fd936127519f7
SHA512

4a3b17a0da62d01bfa7d0b286f11bbf990055ea5f41bd0d73eb42b49d767bd36dadf7068c73d14bb92835c9f091222082c8d4478e152e4de8a16c5f0e6eb9976
SSDEEP

192:A+mJ+IQWMrQdTbmUq/ee69Uoq8WxvacJgQEs:A+mzN8QB6UILmUoqZVaIgQEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6afaef159dfa7cb08268a08ef25f429e_JaffaCakes118

Files

6afaef159dfa7cb08268a08ef25f429e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aca7c27ba8452b64883618d280a957c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord609
ord717
ProcCallEngine
ord644
ord100
ord689
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ