7896a0f17f3922f9303758e5b64268ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7896a0f17f3922f9303758e5b64268ed_JaffaCakes118
Size

384KB
MD5

7896a0f17f3922f9303758e5b64268ed
SHA1

4256d20ccef3ff1c44d237355de9aeaf07e75a40
SHA256

5763b179f61300ee657f6aed34e8633c272e798db7389bc6e7bb3903f549d671
SHA512

8cd836b1f3365c67f4fee127875fe5a5a27916f05ca417f79b3381e2acd4e92e2a60f51bb401726c2106b7de6a4bdd5a14c37d9cb29612a404a0ce04ec2b3212
SSDEEP

6144:B7qXO6cM3cGHyPNwxV6iA0uicbWO3rL/m:B7qcAbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7896a0f17f3922f9303758e5b64268ed_JaffaCakes118

Files

7896a0f17f3922f9303758e5b64268ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f1e985a22227961f63414e41c34eeb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord662
ord593
ord595
ord304
ord598
ord599
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord714
ord608
ord717
ProcCallEngine
ord537
ord572
ord573
ord681
ord685
ord100
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ