774bf2966a714d70b9db026b44a8695d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

774bf2966a714d70b9db026b44a8695d_JaffaCakes118
Size

48KB
MD5

774bf2966a714d70b9db026b44a8695d
SHA1

55e440f6c6a2850318b52eef9e59d3af3bb24530
SHA256

8d0ab14da95a8736469809418056c09ccab8d6f418969c8cd10dfe8e5a59359e
SHA512

e857c625e3867d0f2fcd194553effb3f78bfba82554ec6b04b256e749c65fe0449793823eca35a9ee8db8701e20e4f1e03acab81edeceb5e7bb5b87ec3842751
SSDEEP

384:J1wxhcTIbKBzixE7aNmwzi3/n3SuZY+WNealy30vGNQ/iP7Gzv+z3l8+V/SfaUVy:rsiVzii7aN1iqGBW8AYQc7GTE2NM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774bf2966a714d70b9db026b44a8695d_JaffaCakes118

Files

774bf2966a714d70b9db026b44a8695d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d7ba0da6b1484dd4e8dbf2343fc5a96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord613
ord619

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ