9712a8db158ce72f19bf5f2405fa9117_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9712a8db158ce72f19bf5f2405fa9117_JaffaCakes118
Size

36KB
MD5

9712a8db158ce72f19bf5f2405fa9117
SHA1

ca7afec69d1b22924d88da9fb46062f092ac75eb
SHA256

7f3ccf52708dcfe509c36422ebb8eafa4a5c08330a0cc7f98499c52368d26f7b
SHA512

0f573f2f5fdae9d4f087db1cedd1f0624fe35645b7c02392ee9f6cbfb99b99245e308ab10c7b1391d38210589707cc81e92a04fcabb79d3089bb696f8d077b4a
SSDEEP

384:d5TizXCx/c9ugzTyj67OhzgaaPQribJXjLSeOUb0kEx1:fTizXCJIRt0aPQrixjLStkEx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9712a8db158ce72f19bf5f2405fa9117_JaffaCakes118

Files

9712a8db158ce72f19bf5f2405fa9117_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85729e3e4679b91240c6a142f596baad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord532
ProcCallEngine
ord535
ord537
ord645
ord571
ord685
ord100
ord616
ord617
ord652
ord580

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ