6f4fe2bd54dba0c21d38e493bf98bf60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f4fe2bd54dba0c21d38e493bf98bf60_JaffaCakes118
Size

348KB
MD5

6f4fe2bd54dba0c21d38e493bf98bf60
SHA1

e8162c5b0fb3c908a1c053a13bdf227e93e22926
SHA256

07a39c2081a6f83ad421142c01c49adfcb35343ad8de9daff9bf298c1f66b704
SHA512

64fcd5217b1e31b56c1487bed8ede945201b30663e6fa324d451c621254f42d249887929feb885f76e2d994d59b183e31da648ec00cb33b92e4a6d1b7379c7ec
SSDEEP

3072:6rIeFfJFablYLXd7L1gZeImOgggggggggggggggggVJmvegs5:6rI92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f4fe2bd54dba0c21d38e493bf98bf60_JaffaCakes118

Files

6f4fe2bd54dba0c21d38e493bf98bf60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3c04196c39a8178568763e7bbf0e0db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 328KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ