89ccf17aadbef7b14a47331890a23d6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89ccf17aadbef7b14a47331890a23d6d_JaffaCakes118
Size

172KB
MD5

89ccf17aadbef7b14a47331890a23d6d
SHA1

6bc1a6ece9711babe3b232884627cb5cc33e1691
SHA256

d15f4cd9ff0a3a07468189efc9840c7486a00b8db5bd98cd6d76dffa5e5135d0
SHA512

531a24ccc869bb2fae75ca46446e7ede0e9e99ee4d2765e4c94ad2e18d8d4c2dd8a93e8b1f3c262bacf7f862bda073bed3a34bd8bd1c962e5ee609e7157d5b8b
SSDEEP

1536:6My1qakGbbQ4BZ+DMpApXO1YBGSM62cirxkfPR2Twx4b8bZExjIqN:62tgYhx2fEWac4GxjIqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89ccf17aadbef7b14a47331890a23d6d_JaffaCakes118

Files

89ccf17aadbef7b14a47331890a23d6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262889fed7161dc428064854dcf90cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ