781dca7df0bca5c182df6c169d520525_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

781dca7df0bca5c182df6c169d520525_JaffaCakes118
Size

323KB
MD5

781dca7df0bca5c182df6c169d520525
SHA1

6e3349ba191a532b272afb76915dd1ac57929c1f
SHA256

c63d564805d489447c1c4b34bd5bda98e86debe260d20b00f329335485512c3e
SHA512

49c36e10b128ba267a3e4f84f3e45f890f847c5607b61dc6b70594094c660ed51b005382c3fd67c0189573ec5256291cf3b46566c84ef3f2134f3d28993ed072
SSDEEP

6144:DS7y988mRuBvGLSKWZM5gvi8IojnNzCFQfghW9j0gorpMrDA0x3Br8/0nQs:388moBRKoM5gvzbNzM/f9Mrn4/0np

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781dca7df0bca5c182df6c169d520525_JaffaCakes118

Files

781dca7df0bca5c182df6c169d520525_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86fc1c872f0aa4f9295051c114f3dd60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord569
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord648
ord570
ord571
ord573
ord578
ord685
ord100
ord616

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ