779c397d07775c3b3f4c74fa2c77fd8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

779c397d07775c3b3f4c74fa2c77fd8d_JaffaCakes118
Size

308KB
MD5

779c397d07775c3b3f4c74fa2c77fd8d
SHA1

6fa696efdb3495b7cf355f449863cfd78acc1e00
SHA256

3c1acc711b005edc3045748b83fbe008f42c6bd3f5f02e8dc5f3908d5e35d3f0
SHA512

e65a6908bc2058b0f1359480e4d01f5a205fa60edc8aa002262d0d8e635b7f3d423914fbb27859e4c8a208a2c2e4154fa91d58a8bb8c7d99a99a6261aa3cce01
SSDEEP

3072:osAqvQJ9ihVb+QY7KU3g8L2WUvl0kH8dKDjU00wXS9ifXh:SQkqXS9u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
779c397d07775c3b3f4c74fa2c77fd8d_JaffaCakes118

Files

779c397d07775c3b3f4c74fa2c77fd8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbf0921f41933b618c91e0861e4529eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord617
ord581

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ