95603c2b26e1aa8bf19c00b82673ffa0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95603c2b26e1aa8bf19c00b82673ffa0_JaffaCakes118
Size

248KB
MD5

95603c2b26e1aa8bf19c00b82673ffa0
SHA1

4daeab498693ad40656fb87b240e3ee7735b2672
SHA256

201139108c149def8c22459ec7acead5934e6b80eea12398d07992eabaefa327
SHA512

4afc152d024b1d8aeb4f412145d7c543fce698cea74403441afc9a732e48eb3bfbad4a99bf6aaf197891d0fe52d5d60e6f656b7f108471330e4fb77ecdf089db
SSDEEP

6144:PmNDbcCoEyPVGSaqwgcu9GdmNDbcCZxhmNDbcC:P8cCqMSV5cxd8cCZxh8cC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95603c2b26e1aa8bf19c00b82673ffa0_JaffaCakes118

Files

95603c2b26e1aa8bf19c00b82673ffa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262889fed7161dc428064854dcf90cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ