96bbf1fe1d5ed48f3506e854920d41e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96bbf1fe1d5ed48f3506e854920d41e2_JaffaCakes118
Size

188KB
MD5

96bbf1fe1d5ed48f3506e854920d41e2
SHA1

db2b8c0ad3799825f12e3846279acb57000639df
SHA256

44939e8e0948184f25404395087253c0f9985556b0a0075b9b3b6d5bcaec2ae8
SHA512

0b311352caea85a6cb70ad599c50055d098d66aba0eb600d7ed0b91473c4a6b5fbce636654c43e33e7b1c1a2f24e950347560b7706990dd177e5ddc41e8d0fa0
SSDEEP

1536:eQBtIVXK+QmlHE79W22FPeOn5hjOb5neTbgbTbcg91GU:ec/Y+7IXdeOn5W5nGEr1GU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96bbf1fe1d5ed48f3506e854920d41e2_JaffaCakes118

Files

96bbf1fe1d5ed48f3506e854920d41e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7f19d85ade2bae3e7e730f6857fb084

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord716
ProcCallEngine
ord644
ord537
ord645
ord573
ord576
ord100
ord616
ord617
ord619
ord650

Sections

.text
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ