84cbe85433209222be2a66b770581f5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84cbe85433209222be2a66b770581f5a_JaffaCakes118
Size

40KB
MD5

84cbe85433209222be2a66b770581f5a
SHA1

57023757ee91ed646543527cc99637996410c0e3
SHA256

90fab86a2ced052d0c641d84da60adba8018449680180d333a5bf97cf628fa59
SHA512

518cece748a059c9d0ee73f1eb59a8ba305692ef401d8efe2fb89672921400ece35d38c37dcb4a522cfca2284aca43b89cee42667295907a09d90b1711c9e577
SSDEEP

384:ZvKiz4ln+U4MSl5eD/fjq1OZ95KHi2UU7Kdl7NAIPoPdMPpCIE5Ql+ZxDOEz0YW:Yln34MSlcmg92ihgPWPpPpdTBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84cbe85433209222be2a66b770581f5a_JaffaCakes118

Files

84cbe85433209222be2a66b770581f5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18c9e1026f21d0ecf58acc562a895de5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord666
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord531
ord717
ProcCallEngine
ord645
ord648
ord681
ord578
ord100
ord579
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ