96ee9cb7657031c32dd08d113ccab197_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96ee9cb7657031c32dd08d113ccab197_JaffaCakes118
Size

576KB
MD5

96ee9cb7657031c32dd08d113ccab197
SHA1

2bab07562085f60d82a8624f9280343a8d2f27cf
SHA256

589e35b0db81b8b6ba8907cdca92d25969b1c313de0c521c562436b47d0941fa
SHA512

a00cf4bb787c6315c86034c175f5d863e2001f66e240fd4cc1f7ad831da2418120c64ed183062c76a1cbaf0c1a8f3b167eda0220471f22641837e2b01f3092ad
SSDEEP

12288:8MkVWvLLNSP3cuQqP4KkI/e594+Hr+5dfX+pd167QhEU:R0PgzKkAe5942r+5RE6Eh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96ee9cb7657031c32dd08d113ccab197_JaffaCakes118

Files

96ee9cb7657031c32dd08d113ccab197_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b9502e9919bebe42dd5cb4c5623214c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord598
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 508KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ