968b24d998cd00dfd94418a23243b94b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

968b24d998cd00dfd94418a23243b94b_JaffaCakes118
Size

280KB
MD5

968b24d998cd00dfd94418a23243b94b
SHA1

81f0ee219470ab894b8c3169c8fd8143374663b5
SHA256

30ae79e7886d363344aecc1bbf2ff84e39f0ec0bf9ade9bce526b531c5fa3cda
SHA512

46d57e7645b7674cb23d48420bd50749a3fb4b6d7d470f718341fa7c65bbb4a82cdd77aaf7e3c8def9797f983300dda4fcb4e873b0b77d2593f59fd244c667a5
SSDEEP

1536:0MJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wm9dHukcTf:XX0e1FB/DpKjCLHAm9dHk1mbS6qt8W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
968b24d998cd00dfd94418a23243b94b_JaffaCakes118

Files

968b24d998cd00dfd94418a23243b94b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67bfddf8e6fcad9bf3ff893a3eea3bf1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE