6ef2ba7cdddb352f9c65bf6d5e4bd3ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ef2ba7cdddb352f9c65bf6d5e4bd3ee_JaffaCakes118
Size

304KB
MD5

6ef2ba7cdddb352f9c65bf6d5e4bd3ee
SHA1

70a8d5a6ac143eaeed107a943840a3e6585d471b
SHA256

3cde7db167a1b3bf859c21410036848edf62f09f59089de42ad91d9fe29f357c
SHA512

17d80860596f6d593a0c597d933558083f43defc52959c680a2f3458fd1ad8409151b428d46d64ba13d0f5cf94da12a689871bd9dcd20b05c5c19b8f57086b5a
SSDEEP

3072:uEX0e1FB/DpKjCLH4b5qOxN336MdMfLirKMrbXlYfLiYq336Mc:S3qqULirKS1QLiYoq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef2ba7cdddb352f9c65bf6d5e4bd3ee_JaffaCakes118

Files

6ef2ba7cdddb352f9c65bf6d5e4bd3ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c45b0a5a9b99c8225498f622798fbe5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord595
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord573
ord100
ord617
ord650

Sections

.text
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ