77d3119b63a1e66f8433bb94e33f414f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77d3119b63a1e66f8433bb94e33f414f_JaffaCakes118
Size

480KB
MD5

77d3119b63a1e66f8433bb94e33f414f
SHA1

20792faab4e95af2be3f5486552e893030109ee4
SHA256

90661389569adc6c69958af9674991f9d076197b517533ca483d6323d7cf0cfd
SHA512

09f27b43be53170745c5f8f908e85ec17edd856b4f78d1b372abec0e21abb4abf6a121a9fd6ce13dbf3069eeef93dc2b428ccd010dc6827d262dda921f274036
SSDEEP

3072:tImjE1ukJLPIzINwtOfdvdx5S+K3YwlshBMtWIN7rZ8VWf88GD1FymGA/kEYFSmm:j1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77d3119b63a1e66f8433bb94e33f414f_JaffaCakes118

Files

77d3119b63a1e66f8433bb94e33f414f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e94ae22a30fe74e6ed6df3ea65de5e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 472KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ