75c6424ded134165cd62e4f5f1856702_JaffaCakes118 | Triage

Sharing

General

Target

75c6424ded134165cd62e4f5f1856702_JaffaCakes118
Size

136KB
MD5

75c6424ded134165cd62e4f5f1856702
SHA1

f4dbcf8894d4aebf5f6be4c77effc148bdb61d27
SHA256

cfcbb5a2a2da310b7d5c369f85ea87c6b0014004dd3c1e6806d4094f86ad78fe
SHA512

278a27b26f1bebf436020c50553b0e47e66f6681cf7eee229f2019c7a599f895ab93dec6d79f8d0bd3bf0af2b9c98fa0b3b0081d60db0d0ca45a313d66223e97
SSDEEP

1536:FtzPFt33yPnj/wSPOT+o4x2hypK7D6zdX3+P+kdMTlpmL:F5PDykjCBx2hypK7D6zdX3+P+kdMTbmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c6424ded134165cd62e4f5f1856702_JaffaCakes118

Files

75c6424ded134165cd62e4f5f1856702_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b139daff8eff88013fbc644b937cc42d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ