85705162c7db2b815cd4926908374416_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85705162c7db2b815cd4926908374416_JaffaCakes118
Size

268KB
MD5

85705162c7db2b815cd4926908374416
SHA1

fb4399a166d884b28d9c88b8a47bacd829cd9f6e
SHA256

3e4a62645665fd5225c09140314ac8322ce0394d4ebb051b8d1c8cc0ea213209
SHA512

b6823d285db9156ceaa25f02cd61018d7b17ac8af194dc5b3499a2dcb759c83ac015c109194d1b7c7b5fd72e293edc114d864a18045e3b8c8313f8a35d820de6
SSDEEP

1536:TPKTADIlxhyiXSyqLQoKcKtWFYMQrj91tFhu2GK:TPKAIlrXSy/o/fFk1tS2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85705162c7db2b815cd4926908374416_JaffaCakes118

Files

85705162c7db2b815cd4926908374416_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26c6221681747dbf9b6779f5bd69baa1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord645
ord573
ord100
ord617
ord650

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ