754c6cff50601769c3cc36cc7166ec94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

754c6cff50601769c3cc36cc7166ec94_JaffaCakes118
Size

656KB
MD5

754c6cff50601769c3cc36cc7166ec94
SHA1

e472807d93d8975a40ef1d7e7dfa2db0790fccc5
SHA256

d800f85c246507218458af6d1ff9d3de7d8a10e47ab73f32ecb29130f4447149
SHA512

8d304da47ff0974d42c911c956b52055c44fc251fe418e588b5487ee9e5815eb90a2df1fe835f70f3143f1599c483bd7d2e816a338d97a91ce6ac1d62dc7da79
SSDEEP

12288:SPNZwy+3bt77ujkqMr4m1h0BJX2h0J4mlM0ujknt74Zwy+3KP:ew5Lt7KjkqMr4m1h0Bt2h0J4mlMRjknd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
754c6cff50601769c3cc36cc7166ec94_JaffaCakes118

Files

754c6cff50601769c3cc36cc7166ec94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79067d2166ab8fd11fc7471151d8acbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord717
ProcCallEngine
ord644
ord537
ord578
ord100
ord616
ord619

Sections

.text
Size: 336KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ