84a18fffc105154ec4944e9e802cf422_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84a18fffc105154ec4944e9e802cf422_JaffaCakes118
Size

1.9MB
MD5

84a18fffc105154ec4944e9e802cf422
SHA1

ebb68ec5ee71c6376cffa069fb24bf9453365cbf
SHA256

64e75b0391f9d729a454f6aee41003baba276cf0669ad7e1fed64b34179ae7ea
SHA512

936c48ab8b28cda24073d3c91ef663889a9de092451cea1e9c1853ad3dea05eb43ce6509c3cb5168c1ca7db30b302592131acdafa93b121f9b01f8cc014815e1
SSDEEP

24576:4/AyAAAyAE/AyAAAyAd/AyAAAyAa/AyAAAyAM/AyAAAyAN/AyAAAyAMl15Qyo6pL:JyMyuyMyFyMyYyMy0yMyLyMyP1cyoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84a18fffc105154ec4944e9e802cf422_JaffaCakes118

Files

84a18fffc105154ec4944e9e802cf422_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bb4720ceb82f0cfe4dc01af9e82ef3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord301
ord595
ord596
ord303
ord598
ord306
ord520
ord307
ord522
ord309
ord524
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord645
ord647
ord648
ord571
ord573
ord681
ord100
ord689
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ