71b16ebae3cd77422b3c70c435f5c290_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71b16ebae3cd77422b3c70c435f5c290_JaffaCakes118
Size

164KB
MD5

71b16ebae3cd77422b3c70c435f5c290
SHA1

32f397f828450d053f290039be06332b812e9e3e
SHA256

3af679b26021a0098e1ce9f45e2cbfeb150a66a57548700bdc9fa97fcf0483c4
SHA512

7a7b488814572c4ae0e21cb52af877eb19b45e3b9c014226e95ddc48cc7d62ed7fdfb2391be0c462c39dfdebea703d2d0d16f5a4c6da634e3cfad5541770dbeb
SSDEEP

3072:hUZue6J4/LeVEI/Q4OSVwL7a73ixrJsvlsYOFnz6Vy:hUj6J/EIpqrJsU6Vy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71b16ebae3cd77422b3c70c435f5c290_JaffaCakes118

Files

71b16ebae3cd77422b3c70c435f5c290_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97c2e52e8db502b56d2f91e507317bcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord621
ord595
ord598
ord708
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ProcCallEngine
ord537
ord645
ord570
ord648
ord576
ord685
ord100
ord579
ord689
ord616
ord617
ord618

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE