81c4f9963dd2099915fd4e6f54dad969_JaffaCakes118 | Triage

Sharing

General

Target

81c4f9963dd2099915fd4e6f54dad969_JaffaCakes118
Size

64KB
MD5

81c4f9963dd2099915fd4e6f54dad969
SHA1

f155b91ef95f08884e01e81d3938d8fb1bece37e
SHA256

aca81d6f1061a026df786c014c6599faf8bb77bdba7c7ecf902aed5cb3940541
SHA512

042ec8438e47a6b7b95122abed3b7f10537aba1995f4bacf7067a155257107638f654e68a03ae0a807ce9a2b04f0af6ee0bc6fd02be105042d11602a5986f2f4
SSDEEP

768:7XK1Jsz/2COCKvxPD3WDKaZbO0lBo+fKpxcP60BPYXcgIufVXHo+DNXK:rOJsz/2HCKvRLUipy9BPkcgIutXfDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c4f9963dd2099915fd4e6f54dad969_JaffaCakes118

Files

81c4f9963dd2099915fd4e6f54dad969_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2769d66e8e190f1ca6072b3e76f12dfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord518
ord519
ord593
ord594
ord598
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord531
ProcCallEngine
ord537
ord576
ord578
ord100
ord579
ord612
ord616
ord617
ord618
ord619
ord544
ord580

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ