6f1fff045df709f6e1a25f230e7706e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f1fff045df709f6e1a25f230e7706e6_JaffaCakes118
Size

280KB
MD5

6f1fff045df709f6e1a25f230e7706e6
SHA1

2551062f711f82e817481bd7ddb5327a56158385
SHA256

40f8f68c340a29c9b26f93b59a01c0f1cdfa45cef2ddbe9de00ce9b64e8e9e40
SHA512

b2a05835ccdc81cc1d1d6ac36b13b6739d6227954ab6da665f3899053706b1ba60276f991faba751412b101bd86385df971bc3bbb633ccd00696dc8ebd92d91f
SSDEEP

6144:7uj4NKPl+84NjWbAZBi4dwhN+f9qPOcU6BcoZSG:77HcA8EMU6BcoZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f1fff045df709f6e1a25f230e7706e6_JaffaCakes118

Files

6f1fff045df709f6e1a25f230e7706e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d5e0549f2ce42c12d6c93b7784edf94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord690
ord585
MethCallEngine
ord666
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord648
ord572
ord573
ord681
ord100
ord689
ord614
ord617
ord619
ord581

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ