70bd10734963f0078596f9839c91d2ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70bd10734963f0078596f9839c91d2ee_JaffaCakes118
Size

72KB
MD5

70bd10734963f0078596f9839c91d2ee
SHA1

6832bd8d714c1bf33fe77c37e146c47825230414
SHA256

ec5ff7cddf6b4e1a5276da39cf77729fadd57da26faf71b5174415ad80f3f543
SHA512

a2f5da5331b4c6eeccf5ab73266c6aaaf865a686f9bd59220a3ecdec37b1cd56caa53dfd1762a4be2f4f4c5527cc590027464efc0af7f0c1aa53fcf9f5b4194a
SSDEEP

768:MqVJX+FhwspRMbQ+PuXyyyBW+9BkhmODVjyxIbRXh:MqVJuFyZbwXClHsyxIdx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70bd10734963f0078596f9839c91d2ee_JaffaCakes118

Files

70bd10734963f0078596f9839c91d2ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9450feb51f87ed1f9c57f6ec4ff4bb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursorPos

msvbvm60

ord690
ord187
MethCallEngine
ord516
ord593
ord300
ord594
ord595
ord598
ord306
ord307
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ord318
ProcCallEngine
ord644
ord647
ord649
ord685
ord100
ord689
ord616

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ