75c1a85655ff04a3c2c277da689fcc01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75c1a85655ff04a3c2c277da689fcc01_JaffaCakes118
Size

40KB
MD5

75c1a85655ff04a3c2c277da689fcc01
SHA1

8a7473e347dcab8b48d87bfe02ba15c1fc0702c8
SHA256

def1a1ac1fd15945aad30772f69fc04f08f7e0cd4fa7685f5f12ebae1fc73358
SHA512

f4910ac85571b248fa2be708b95fadb0bf1e435eb3849bb840b215781a76adbaa51f3db1cfc42dd7e27e306aa49608219e7768fb443e8f86ad55a82a2e19dcbb
SSDEEP

384:cZ+2SxDKRMMD3U5MicAve7/S33aAcqoq7JoBbiY8UsGtu0jHcCiwGC731o6hCbyq:kODB23G7v6/S33Dc1U70ujCiwx3hCy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c1a85655ff04a3c2c277da689fcc01_JaffaCakes118

Files

75c1a85655ff04a3c2c277da689fcc01_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

01d3195e52d39c8cac23fdd63d505ea1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord717
ProcCallEngine
ord537
ord681
ord100
ord612
ord616
ord619
ord544
ord581

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ