84009c2088b7b688ff74e322cb7c5cb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84009c2088b7b688ff74e322cb7c5cb7_JaffaCakes118
Size

176KB
MD5

84009c2088b7b688ff74e322cb7c5cb7
SHA1

559570c215429c653474f8579484cf96232f9f32
SHA256

6293990fd851eb4648db94d00fdde91534a50c693a5179e46bcae18eee7c7bcb
SHA512

3fbe4c97c078671f87a57b15d1781453166dbfa6db60d333630b4ba443a6732ececb7c0a7ecbf188ba169253d706e7408edb73b3b31231cd9e5f84b2561b4d04
SSDEEP

1536:7qc3ERJ+iPyG3iEoWTb4cQHVgOmuTEowrVlCO5S9E6jY5ExGBdIENT06:+TPyG3vvCWxKmBdIENT06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84009c2088b7b688ff74e322cb7c5cb7_JaffaCakes118

Files

84009c2088b7b688ff74e322cb7c5cb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1db004fe5af3188366fe8f3206c66dcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord616
ord619
ord581

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ