86d414c4bf14a89509149c0659bea4ee_JaffaCakes118 | Triage

Sharing

General

Target

86d414c4bf14a89509149c0659bea4ee_JaffaCakes118
Size

56KB
MD5

86d414c4bf14a89509149c0659bea4ee
SHA1

43758d580c2405ecf3f2b74d9bb86fb5b16ba16e
SHA256

5c78edacb6113fb4c2c326c956736ffb2ccdf639764aa317101a368f7b098ee0
SHA512

5efdff2c89f38c822830f792393154ac1a8ab69464aa45610e86260532c2eeaf4e4da7a3bf9b572e8d3c48e6a229f34d6c1329eb5b2db3c67aeec4ddee37bb9b
SSDEEP

1536:/LQ8VaH9efC7fRJBAoQow4DLzrz7DKSaiqStV9lNltMUsks0PXfnYZdyPmTM45:U8VaH9eq7fRJBAoQow4DLzrz7DKSaiqF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86d414c4bf14a89509149c0659bea4ee_JaffaCakes118

Files

86d414c4bf14a89509149c0659bea4ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8170f77fb324d61e883ccd2cd5d70fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord595
ord599
ord306
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord716
ord645
ord648
ord571
ord573
ord100
ord689
ord616
ord617
ord650

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ