a1ff7db91a5121f8990362714524af63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ff7db91a5121f8990362714524af63_JaffaCakes118
Size

16KB
MD5

a1ff7db91a5121f8990362714524af63
SHA1

6b90bfd8a43b495be348e092b94a37ea5c6ab8ba
SHA256

e45355f0d04dea96969d2ee940688bc3eaa4cd52abe5794f2206829de3e68198
SHA512

93ec5a3143b5934ff5b0bdd66fb72a808d35d9f51df29b7a89b8edd3ec8a19f5dd2abb696f4d40764b82a469f5b0aecda796386ac3ade981469abd07a2364055
SSDEEP

96:y69GDCzEgJlig2JUKvCCmduSzpC84fNCJwLU/UEKv2Y4aJqpnhQezR:0DCzEytQvDmdvpsN8X/UEKvzk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ff7db91a5121f8990362714524af63_JaffaCakes118

Files

a1ff7db91a5121f8990362714524af63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92741ef9defed5635d14dcd8e993614d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
ord619

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ