a68f041fa96066a2921f7b814647d845_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a68f041fa96066a2921f7b814647d845_JaffaCakes118
Size

552KB
MD5

a68f041fa96066a2921f7b814647d845
SHA1

e947e55676f59e9a860c0d738bb01f7e5f121ee6
SHA256

5d50e5f83e5502ee775106a4cc5a33feb3d83f5a91938f2a1915373f863df0d7
SHA512

38d2eee653cabafe1bb433de8d54bd58d991a207d7c7df24ad6f9471f18cd2c251bb07c3a868132250981f7519cd7da8dff5dd56a78ed60448d88b699260f71d
SSDEEP

1536:XJTUP8jcv1bBWqUs9C4bTmfCXaq4b2rwT00AS6rgkwamoY7KmXeJvKL1HX6aZtBo:+3NphYjJzdlOAc1s9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a68f041fa96066a2921f7b814647d845_JaffaCakes118

Files

a68f041fa96066a2921f7b814647d845_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e774db343543369b37700a8c62eb6dd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord666
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord644
ord537
ord572
ord573
ord681
ord100
ord617
ord619
ord581

Sections

.text
Size: 540KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ