861dc169e1c2b0da7d734f96ba3a5d8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

861dc169e1c2b0da7d734f96ba3a5d8c_JaffaCakes118
Size

264KB
MD5

861dc169e1c2b0da7d734f96ba3a5d8c
SHA1

725648d555530134de2cd6fe2a06bf6469a9029a
SHA256

4a9be24711b675ffd3ad92774bc3dc46a5c932d24334361669fcf8e6ae09870c
SHA512

26f4c12af6b780355e1c5b14da542c1c2d7edc19a6b555e1db473257c6bfe29e6fbbb4f5fe7572a21e59253771e1df16dce3efd19330b9c928e6493963ea4f1a
SSDEEP

768:lRPiQlPS3y1r54rv8CcoP3k00rnw8pVq3f01F5BCGDo1GwNE/s4KJzQODYBzqcvQ:zKoRKT91cG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
861dc169e1c2b0da7d734f96ba3a5d8c_JaffaCakes118

Files

861dc169e1c2b0da7d734f96ba3a5d8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e94ae22a30fe74e6ed6df3ea65de5e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ