70f880748b4764eaea60e756f53905ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70f880748b4764eaea60e756f53905ea_JaffaCakes118
Size

384KB
MD5

70f880748b4764eaea60e756f53905ea
SHA1

1224c5014a6e5ad72f4f0c547075284cbe3077e0
SHA256

55e50d668b69d4a8cf78e2d8994c13f97c5a6a24287cb96e3380065024f01537
SHA512

8d4be25d2fa4b097d18107842aed924b4aaa2c9139d7c9a708e0a4476d9ad38b9d11c2982700010f82847463a927a5f6ea125d04ce6a06b698e198b9e6594d08
SSDEEP

6144:fVXbsD5JsrqW8d01uL58Rx/NfdBtRDqOsSqdiU9CsYGhhp2En:fVXbOurqW8AuLexBtRDgN5p2y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f880748b4764eaea60e756f53905ea_JaffaCakes118

Files

70f880748b4764eaea60e756f53905ea_JaffaCakes118
.exe windows:5 windows x86 arch:x86

734fd809e18c294f860bfbef4b577b72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord595
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord648
ord570
ord681
ord578
ord685
ord100
ord579
ord610
ord580

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 358KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ