841bcb67efff1a1ed2887df85f5ee98c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

841bcb67efff1a1ed2887df85f5ee98c_JaffaCakes118
Size

84KB
MD5

841bcb67efff1a1ed2887df85f5ee98c
SHA1

155b7304f5d9389ba5ee571d365e31f63ff2ad69
SHA256

61fa206208fca436ba57ed5748726d6a641d019d66c21f2f434fa56d1de40601
SHA512

e85bdc0ec05e5ffada299b6eb7eb1f87ef996d71736d8ad47cd8e11f7dfa44658ab3c945593b533063a053654bd27766b6fbb022d1364c3e34fb9998cc21c1b2
SSDEEP

768:vHrQ+LX10dHXV21+eEGrRoDw7fdiNNdhd2qlmqoYk6yq+Fu8epCsEsACyij:vZMl2EdpadiNNdh+G88

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841bcb67efff1a1ed2887df85f5ee98c_JaffaCakes118

Files

841bcb67efff1a1ed2887df85f5ee98c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfa5ffad8eac71a7f4d657763f159c5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ