70ff458be025d987faba3a03fd6fbb62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70ff458be025d987faba3a03fd6fbb62_JaffaCakes118
Size

128KB
MD5

70ff458be025d987faba3a03fd6fbb62
SHA1

072b9bcd10a02f5b9ff7db37714e4041952b814c
SHA256

99dd31e9d3a30f1a2e30cff24c0280e1bd38613935fa0779fa651f927f10c684
SHA512

7064699e1ef6010358a513430a8ff90bb6253a46b37523e667a6ff0bca83d810f93024fbee71e6cae538d39064d5333262c7cc541184c38dced4196498fefa29
SSDEEP

3072:QedZvKQ5C8UgZD4D6JGF1RKZcZiD1f+7DLW2:7UQ5C8Ue5Jk1R/i5f+PS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70ff458be025d987faba3a03fd6fbb62_JaffaCakes118

Files

70ff458be025d987faba3a03fd6fbb62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a426abd75aa9008519eac791a06687ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord593
ord594
ord595
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord685
ord100
ord616
ord619

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dmA(j1
Size: 560KB - Virtual size: 4KB