703f16796f5d1b8c695ffe550199952e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

703f16796f5d1b8c695ffe550199952e_JaffaCakes118
Size

1.9MB
MD5

703f16796f5d1b8c695ffe550199952e
SHA1

a103efb503970cd28faa3cc3401898731a1329eb
SHA256

ea8c2667413951c70fc8cf184ede451eb7d2fa077bd3c4b249bb2f86d672e8ae
SHA512

ed72d4323a5859087ef1a62c1a1fc2a058f40385269e081a788d03ec4db0a3b9a09bb18eea690ee8f1f93e132ec967de52c43d00fb90628e2f96ec0b109ae723
SSDEEP

6144:vgUUcGuZPSjOSHQ3MM4GCm6k/6PBUyhsdEI2++M+RlTHY:vgUUchUoyoyhsdEoT+R9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
703f16796f5d1b8c695ffe550199952e_JaffaCakes118

Files

703f16796f5d1b8c695ffe550199952e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8421f54eae043e18d1e45590640420eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord516
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord716
ProcCallEngine
ord537
ord646
ord647
ord570
ord648
ord573
ord685
ord100
ord616
ord617

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ