78784b546613ff1c036782b8d5f5bfeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78784b546613ff1c036782b8d5f5bfeb_JaffaCakes118
Size

208KB
MD5

78784b546613ff1c036782b8d5f5bfeb
SHA1

35bd9be435bcf1788e91c1dfa0fca63006bafb21
SHA256

8a725fcde058ffdaa40d520b5933a02bda9f7c939bc4adae0ee7e71e4983204f
SHA512

c60e23e65f361729ef0644c828291bdab94f84172009e8d0384a120f75d5a1f82cf2b0630d1e326ffc09864511d0d891bea8df80d7416e68803e5dc69aea20f4
SSDEEP

3072:iNGp+PW+uFEI1ZCM1PqG9pT632FszuZMrBLDV8D23voqWdNICfPzf6G3NQYy3x8S:qul2NvV8uwqWdNIozF3+h8tdWu2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78784b546613ff1c036782b8d5f5bfeb_JaffaCakes118

Files

78784b546613ff1c036782b8d5f5bfeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eae53c081ea8224c0ef1a707da77f7a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord661
ord666
ord300
ord595
ord598
ord306
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord576
ord578
ord100
ord616
ord617
ord619
ord546

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2304.0MB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_0
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ