a61809a442165d0035393dbd1b3780b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a61809a442165d0035393dbd1b3780b9_JaffaCakes118
Size

160KB
MD5

a61809a442165d0035393dbd1b3780b9
SHA1

5b33bede0695d8ef4db95c82f2a9abf0cea9b0d4
SHA256

235f81f26126a8c34421ec4536e9aa8ab2f5530ae032decdd3466d0b31c1557a
SHA512

a859cbdbee8bff11cff793d37831e0d8e3fc89a2feec9a8f00202e21902c14040985856b9f6c99bbd317a9e875f6d73e1fc94939b74392150778f7fdfc009608
SSDEEP

3072:y8WBdBTTrTTyc+IGmTTFzWfQNk9yG3FcYfQZGmTTFzxBTTrTTyc+Kgdl:y8Wrj+INzBNzxj+9dl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a61809a442165d0035393dbd1b3780b9_JaffaCakes118

Files

a61809a442165d0035393dbd1b3780b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38b261ced015bc3ffc08e9caed8bd654

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord573
ord578
ord685
ord100
ord616
ord618
ord581

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ