7140f4bfa9abd55661b4175af8b991e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7140f4bfa9abd55661b4175af8b991e0_JaffaCakes118
Size

32KB
MD5

7140f4bfa9abd55661b4175af8b991e0
SHA1

6335ba87ae7df20f11096ccfc26b9c26959684e4
SHA256

42eac02f0caed75ec129c6c2b1814bfe44a1efc086ee1b7e2b5189ae51e8be67
SHA512

c95d299c6e6a8e0fa1e092b0f894150013469374816445218e57fad60bd1e7cb7d054829a1cdcfef3ec73473179e22078bc947d147642428795c767b35cc9418
SSDEEP

384:kdfHVG4CPeZlHmeb7ipioQN+NrYle4oJYqFzVnJNf1PcDF4w8:2HVgPeZlzNeYle5JhVnr9cDF4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7140f4bfa9abd55661b4175af8b991e0_JaffaCakes118

Files

7140f4bfa9abd55661b4175af8b991e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c05ce4201a3179664c80c9fab4cf2657

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord681
ord685
ord578
ord100

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ