77d4de2e9b024ae34f00dfae5709ffa5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77d4de2e9b024ae34f00dfae5709ffa5_JaffaCakes118
Size

64KB
MD5

77d4de2e9b024ae34f00dfae5709ffa5
SHA1

b8b946da92556189660f60202ee6334a4b56406b
SHA256

9ff1640eb3ddedadc54adb1a603a4725e8448f20234fd7587b9d8d1bc3559efb
SHA512

1a497b73e47c37664671361bd395fc7cf218c534c247f99f40891e9b69f3b1b7d3310eaafbb40af0fea3ac3b1a40163bf9416ae8b5977846046680b0a01811be
SSDEEP

768:erUS5Z28C/FYQbtnJuwuOH82QP2oOtkGdV8z3kOEBntSCdRZ2W31Uvx:M7QFYQbt5y2oOtkGdj/9B31Uvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77d4de2e9b024ae34f00dfae5709ffa5_JaffaCakes118

Files

77d4de2e9b024ae34f00dfae5709ffa5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81930be0d5757f4682c086d34ad2c12e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord519
ord300
ord598
ord599
ord306
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord617
ord619

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ