8557361591aa543976893ef09308cebb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8557361591aa543976893ef09308cebb_JaffaCakes118
Size

312KB
MD5

8557361591aa543976893ef09308cebb
SHA1

61c4a19174b6981bfd319b598b158d39a40e76c6
SHA256

660a68c1188277b69c0d39b70c9bf7cbc0b8b73588862a425381c2237e57dd25
SHA512

f762d4ee4721db9fe8d0d310a10640911e19870344a9efa1522a31f3214af6f08595551e6a3252c654df00518c1ba088507cd3e47af8a2e6fefb775d00b34f50
SSDEEP

6144:wUr82wT1zlOQubhvLj9YzI8yX7x9/LFZzEmvW5QfiRfxVI7OAqyZczeDXSNA3Yoz:WzABfzEmv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8557361591aa543976893ef09308cebb_JaffaCakes118

Files

8557361591aa543976893ef09308cebb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bb4720ceb82f0cfe4dc01af9e82ef3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord301
ord595
ord596
ord303
ord598
ord306
ord520
ord307
ord522
ord309
ord524
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord645
ord647
ord648
ord571
ord573
ord681
ord100
ord689
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ