a877c662d1f55bca680d559a956d46c3_JaffaCakes118 | Triage

Sharing

General

Target

a877c662d1f55bca680d559a956d46c3_JaffaCakes118
Size

24KB
MD5

a877c662d1f55bca680d559a956d46c3
SHA1

12e71ba12812efd497308ef17bfa987b9a296491
SHA256

6c9c85e7e42e4007448b3f9ecca312399ec164cc4e879d5e1d047aa2dfb44b5b
SHA512

027a416ef3b42f61b1f854b21020c6bdbfa5a3837cf3840407d17da1d47d17040a7b7e06f49dd5dc3133a89cff7331ad89e6a22bca05e6230597205a84ee0a41
SSDEEP

192:87w4ob1e4jWR+QPHNyrwPTbgjb9Qfm7w4ob1e4j:awFjAvHKhQfgwFj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a877c662d1f55bca680d559a956d46c3_JaffaCakes118

Files

a877c662d1f55bca680d559a956d46c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56f1e2b0304b8c55121fd56d617707ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord305
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ProcCallEngine
ord681
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ