71a17fc3a69b009c1ee02fca7a7b93a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71a17fc3a69b009c1ee02fca7a7b93a4_JaffaCakes118
Size

16KB
MD5

71a17fc3a69b009c1ee02fca7a7b93a4
SHA1

f194348c9088830d9eff1ac8fdbf95da02d5acd2
SHA256

682d02e0600aae0950e78b0683f29a0701e772a4ad2db3f9997be6b11b820298
SHA512

40b24b18b1d6303fb5794cd7a85801a80cab3b1f36016a586f2f39c4641795083ea5d3c863148ec3957ed4e3c13fec16735c1bdfa376befd5ccf2a39d573e40f
SSDEEP

96:JEKIoySavG51u1tiAWcP3LgNgIqtHiQMoyeC5Ji7AQpAbb+3IhYDl6R86E:4eQW23LaJBfPf+YW886E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a17fc3a69b009c1ee02fca7a7b93a4_JaffaCakes118

Files

71a17fc3a69b009c1ee02fca7a7b93a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

854dd1fc5f7fd3dc697f613ac8345918

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord300
ord598
ord306
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord570
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ