83f850fae72b35f67a2b230b84e736d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83f850fae72b35f67a2b230b84e736d1_JaffaCakes118
Size

232KB
MD5

83f850fae72b35f67a2b230b84e736d1
SHA1

9652f94bb2f1461019e297ae6ef0d1f2dde61809
SHA256

497f1f090f82b454cb9e4aeedb0c8117efc4f3106c937518b8791bd5456f3a34
SHA512

62d6aee90a634e74ff43209058343b053f8a784efa89eb9c682af3d8349f9314296c52f90d7fb3505907b1dbfe4e779a1b3af2b772567b384c143aa7eb0bb76b
SSDEEP

6144:LsruGCJB4oYIAwgQlJg4AHLmGIGWeNrUyK3Qdooo+GkyaDYL3K:gruGCJB4oYIAwgQDg9mjFyK3w7o+Gky0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83f850fae72b35f67a2b230b84e736d1_JaffaCakes118

Files

83f850fae72b35f67a2b230b84e736d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11900666f3182d4f5eed6b53f90f3546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord647
ord685
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ