7771defccab200f334f763f7954fbc1c_JaffaCakes118 | Triage

Sharing

General

Target

7771defccab200f334f763f7954fbc1c_JaffaCakes118
Size

60KB
MD5

7771defccab200f334f763f7954fbc1c
SHA1

5284ea4f243b01d9661c9cfd6580d921f0112f49
SHA256

67576795e195bb7c5cb621a39f5fbaf639b7f98310e89f60f8a6a50adc67c942
SHA512

e9e03235a92939934382e9e6d21042c4c8724d93aac3c827dad96ed328e59c802ebabca4842f2a8af324da4bf4ff9b432870c70c73ed4ba0626892d0e9805322
SSDEEP

768:5ygAU8bNzIQt6UmFVjHovQ/o/THkbAqs3OfKDHGlHRJ6W6Wc4:5yddIYejH2oQ+RJ6W6Wc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7771defccab200f334f763f7954fbc1c_JaffaCakes118

Files

7771defccab200f334f763f7954fbc1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcd32fd1eefc3c1f5bcc67f2c3a0aa86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ