6f89cb89b631a4dd0d8896a151e866ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f89cb89b631a4dd0d8896a151e866ae_JaffaCakes118
Size

76KB
MD5

6f89cb89b631a4dd0d8896a151e866ae
SHA1

bdfe96b9cc9d91b40d2a5433f39fcb038de1fd23
SHA256

dc0cd286214e4d4bdd7174461f45a754972d6aacd876d75d1f00a5f0fb7c5a74
SHA512

491e160773a01cc8d2f8c1ecb5c8ef99e859ecade0c6e8737b1d7d10a299a6ec963a99f67f28abf2388d8c09fbf53dac8b1df3f13f9a0dcfab0a23fbfe03d527
SSDEEP

768:LFMFU3FeRtjpDXtOAjZ4y7942THAjpRtjpDXtgFhFUfF:Zs2e/jNwQG/jNy3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f89cb89b631a4dd0d8896a151e866ae_JaffaCakes118

Files

6f89cb89b631a4dd0d8896a151e866ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a6fb212ed33e740c1aa52d262386baa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord666
ord303
ord304
ord598
ord309
ord631
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord716
ProcCallEngine
ord537
ord570
ord648
ord571
ord685
ord100
ord610
ord616
ord617
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ