85760400270c68a5eee31c858134f804_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85760400270c68a5eee31c858134f804_JaffaCakes118
Size

196KB
MD5

85760400270c68a5eee31c858134f804
SHA1

b57b1008a5e314de15290ee5c3cd765ad94b905d
SHA256

2acbf41580a6f940d16b4f664f85f2166394c9584373b4da726229ec57cebba0
SHA512

9296f0ab25ec70aa1b4b0dc4964c757e1868cbbfd1cf98501ab8a4d02ff7b3c98fd2d57ae12bbaf656e8075d4c68143f9910441a498780e76f1e4cda5c0bf3f2
SSDEEP

6144:uQVX+nQI/FwZG4a6ku01k9eOXi4L3nPJ4coRc1R1:uQd0hKZpku01k9eOp3nPJ4c//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85760400270c68a5eee31c858134f804_JaffaCakes118

Files

85760400270c68a5eee31c858134f804_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e83537e34aa04e0f19300d99c1de24b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord597
ord599
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ