84671d2660ced29d098c1ddb8119c92c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84671d2660ced29d098c1ddb8119c92c_JaffaCakes118
Size

72KB
MD5

84671d2660ced29d098c1ddb8119c92c
SHA1

87ffd6aa5cbf60993817440bbd9fa59764cd1ee7
SHA256

1144bfca37d494989e0e02af1291ddf386547541b83fc7966fbfa821204b293e
SHA512

801e2b8746532580fc77c7275ef27b222f2fb7dab01a1c77bb6297e6e34a9ac1ff6c84acf9fbddeb47e633886ba48f2ec0c0383c4b769f4366ea75f1e0af4323
SSDEEP

1536:JINQwu/QJO5Hv/prPsMKBkq1TcPO5QQ6INQwu:LQs5Hv/prPsMgkMTcG5QQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84671d2660ced29d098c1ddb8119c92c_JaffaCakes118

Files

84671d2660ced29d098c1ddb8119c92c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f8b7845af7d7f8a11e61f504f29fefb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord553
ord660
ord665
ord594
ord595
ord304
ord598
ord520
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord607
ord608
ord532
ProcCallEngine
ord537
ord681
ord685
ord100
ord610
ord612
ord613
ord616
ord617
ord540
ord618
ord541
ord542
ord544
ord545

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ