6fe41eb586296f6d96e81514db68799a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fe41eb586296f6d96e81514db68799a_JaffaCakes118
Size

28KB
MD5

6fe41eb586296f6d96e81514db68799a
SHA1

1369b9f6fc16e65c72c0d084532317cd030a2aa9
SHA256

e1e46686b113690fcaa5dae28fbc145b7f4243143700e0295f79031e9fbc4def
SHA512

9007b2dc24adc958951b19060cbb9b298f945894526aa59fe61bb200d4b984eb0f085f9befbb8bdfe9da01d28a38fb66f1caf255b5dec217f819b9725609e77b
SSDEEP

384:mQXfyW0K2TNkdDDnuzjXLXnk9+h8LXkOLXcoHzhhLXroHzGjxgM:mQaWM7/XTnkEh8TkOTvThhT8TMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe41eb586296f6d96e81514db68799a_JaffaCakes118

Files

6fe41eb586296f6d96e81514db68799a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

702a403a276af437b1447f8d832e8518

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ProcCallEngine
ord537
ord644
ord572
ord100

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ