9ff66f564e4db49867b83326adfac209_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ff66f564e4db49867b83326adfac209_JaffaCakes118
Size

20KB
MD5

9ff66f564e4db49867b83326adfac209
SHA1

c8e0ad0417039a329ed084fc6cf99ddf8450c44d
SHA256

0e96ae489cb61b590d09d2a1c2bb78844e4c18b22f2c86f1e2d6dcf41e29c99b
SHA512

c412821891862250d4263658420e386a5bdd4ec12e551aad56a9c18340b9d1414d3cb1ac48ea4c922c4b57e038443538ef5d77b1d394941524660b258ad497f6
SSDEEP

192:HAN0gplfYiNUE3Ow5yd+CQydiLJmQLPlz8waVq:H80g4iGEf5ydDQydWmQL9Ywcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ff66f564e4db49867b83326adfac209_JaffaCakes118

Files

9ff66f564e4db49867b83326adfac209_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da884687db5116b5a6d1e0db1a7aec8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord570
ord576
ord100
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ