9610565c15e7fdc2dff3ca150d8e3bbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9610565c15e7fdc2dff3ca150d8e3bbf_JaffaCakes118
Size

16KB
MD5

9610565c15e7fdc2dff3ca150d8e3bbf
SHA1

118bc00376978a157daafd2c0205c3dd50a44044
SHA256

bcdfebbb5bc920f4ba87667b9401bd28b4785d9fb69d1a227949ac623a48f417
SHA512

d4525ef82aa837fac56ea51125b4e844b07c37c3d8f2c696e4eecb67aada822d72c2b93a3b9016ae31911ba90f2df6085bf81f69e933cc27cde93e717e623cf1
SSDEEP

192:pcaZ2AjAgUdeFRCcZokAW+1faXO3M8M6WXL:pc1dejseO8j6WXL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9610565c15e7fdc2dff3ca150d8e3bbf_JaffaCakes118

Files

9610565c15e7fdc2dff3ca150d8e3bbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bbcd290dbe8b40a414e0f0826b15f3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord595
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord537
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ