897cae6cacab9a0badaeb1875843d1b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

897cae6cacab9a0badaeb1875843d1b9_JaffaCakes118
Size

160KB
MD5

897cae6cacab9a0badaeb1875843d1b9
SHA1

29cd0735a573d0f23ebb27c1d3295ed556843e54
SHA256

2508476f86e38bfa2ed04a7a28724e3b53e1f9ebb3b927b7e906a6ea362d57d2
SHA512

7ae1dff1c254de1b99509c760ed8dcbaaaa12e172103574499783024c49c3343cd6b469875b6403d7869740b5c3e14a55ca792cf0939b29851b19879cafc1d46
SSDEEP

1536:q0+mxKNK1EdEdZlhDYavcOHV2UIMVdidFKNK1dp:V4k1EdEdZlhDYavcOHV2UIMVdid8k1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
897cae6cacab9a0badaeb1875843d1b9_JaffaCakes118

Files

897cae6cacab9a0badaeb1875843d1b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3666e6f55d58eee4c54751ba1b05b43c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord595
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord645
ord681
ord685
ord100
ord612
ord616
ord546

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ