897a48806e8c7b0d63680d6680177e2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

897a48806e8c7b0d63680d6680177e2a_JaffaCakes118
Size

28KB
MD5

897a48806e8c7b0d63680d6680177e2a
SHA1

b0141d95e5e39fad45bc1426283b3445b5e2121a
SHA256

7f25eb122c0d90bdfc0a128130ef8c0b8cb43eeb29f8d4ec5fada62397b9c55c
SHA512

1f9c520db969d8692203b25348c326f5a1b67209d6564d0894641738ce97319ea35c5df88e4aa065419001a279162ed83cf6e3fab80c5265f0f8ba8a5cb1dea9
SSDEEP

384:ZQoDHkF6QoDHkF4k1f/nS9RPEERMVHDP/tIXJofkarWd7W7EWQoDHkF:ZNDNk3S9RcV1ztIXSfkarWd0EWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
897a48806e8c7b0d63680d6680177e2a_JaffaCakes118

Files

897a48806e8c7b0d63680d6680177e2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8b609c115d89cf03c14fd860df56e31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ord644
ord570
ord573
ord100
ord619

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ