7099680be026378ad1a8ac21eadfb874_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7099680be026378ad1a8ac21eadfb874_JaffaCakes118
Size

252KB
MD5

7099680be026378ad1a8ac21eadfb874
SHA1

38d39c4216f589f4749fcd2c820568ec0cbd5b4e
SHA256

b558149afe26d7f7c6a18a4224ead8707ae9f0bd45cc02faf17299c11d5106e9
SHA512

83c444e39469287e95559a264c6e13f0d7dd8ba5d06204154ed5da25381fc8c72e1320ef2275d072ee04528cc640217d0041afcdce1c711140d21234de857dd9
SSDEEP

768:APS0iQgM+4jlow10eM8lRB3nfaL/LzlU5Xprs:A30v43CCPO/LzlEXprs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7099680be026378ad1a8ac21eadfb874_JaffaCakes118

Files

7099680be026378ad1a8ac21eadfb874_JaffaCakes118
.exe windows:4 windows x86 arch:x86

103af3832ed9965c8bf53747b76c3031

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord558
ord666
ord669
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord573
ord681
ord576
ord578
ord100
ord616
ord619
ord581

Sections

.
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuOpPx
Size: 212KB - Virtual size: 4KB