70e6434e4120576af61139ee2a2510aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70e6434e4120576af61139ee2a2510aa_JaffaCakes118
Size

263KB
MD5

70e6434e4120576af61139ee2a2510aa
SHA1

8d10f297dd884b62cbd7666caa26fe2e1d130311
SHA256

18005de0d503fa139321e56a3ec68a8bfb40ff9697a507c0261fd43d9a69d591
SHA512

06b211146e61f00146ab0eec53162c64de9c362f3ac5671f88f9a03917e37166e994c5046b06df5cafc03327d0073d674c82c5864bf873211db7038718625ffb
SSDEEP

3072:c/VGEay5VjJQoGfcrpWjzaCF3HOjLyV1S0ZTHc4do+4mAtkj:yVqxisRkKotkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70e6434e4120576af61139ee2a2510aa_JaffaCakes118

Files

70e6434e4120576af61139ee2a2510aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e59daa932f0469d4f36b673938ef52de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord596
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ