76334e15b68374a391adda2bd6561eed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76334e15b68374a391adda2bd6561eed_JaffaCakes118
Size

712KB
MD5

76334e15b68374a391adda2bd6561eed
SHA1

6fe714f736139609fa9cd9e5e9a55629dfccf357
SHA256

9280148464e48a9efba9d0d76dd8ac25188cee7f4539c1475f09ad26508c309d
SHA512

1aeee52f056e732a682881298ec66b6ab55413c961c6bdcba06b312d2a04ae02b9783ad72f3727f2593f2e9c04749ca2fd2e6c0d9645f25cd9cad1e263b49adb
SSDEEP

12288:S8AYxYhhJ5HfYEPI2QDBtRzesgEXHyhKo2bSpId2:JchhJ5/5XtsvXHKKoz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76334e15b68374a391adda2bd6561eed_JaffaCakes118

Files

76334e15b68374a391adda2bd6561eed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e52300d9ae26ddb8547ce2d794ab89b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord598
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord581

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 664KB - Virtual size: 661KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ