7066c6394ed3e4532a0d8b5d7e582d18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7066c6394ed3e4532a0d8b5d7e582d18_JaffaCakes118
Size

384KB
MD5

7066c6394ed3e4532a0d8b5d7e582d18
SHA1

073dbd3c27bc3601535cf372781da0ea377bdfc8
SHA256

5749c4cb82c59a668165b700d9d74bdf430e73638640fc515d88f10f45a5c963
SHA512

1b752835eb69d32ae4e4b5c1ee440076bb013f7c40ba5f9af0e56c74dddb963459f38f0ac8be8ab143e9a18c12e20906a2da07eae137e4f5c4a9bbd1853d5c66
SSDEEP

3072:fgBxUzUpYff8kw+cbz0Xq2RMgtOt0gyS7cNBa:4BxUzeYffNw+cbYaoMuOtR7+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7066c6394ed3e4532a0d8b5d7e582d18_JaffaCakes118

Files

7066c6394ed3e4532a0d8b5d7e582d18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea19fc0533a95b8912daef4824f72b1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord531
ProcCallEngine
ord645
ord576
ord578
ord100
ord617
ord619
ord580

Sections

.text
Size: 308KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ