a6d3e44b34ccfca7b894c464c51fcd73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6d3e44b34ccfca7b894c464c51fcd73_JaffaCakes118
Size

76KB
MD5

a6d3e44b34ccfca7b894c464c51fcd73
SHA1

ed516b6e90002d57d64f942c80b089d3359457e4
SHA256

688c2e4d95b2ad6986a3cdd173ef76c2304cfe79168b9ef9e08a304fcb765a23
SHA512

c10f64418f0320e1e2ece424abd2da944670d5e1eccf4b489109b39bce85dd54503b09c3e18291e7fe0e5a8196656df826072db633bb110c49067700119bd5ad
SSDEEP

768:lWk8hmwPaKUIxbzx7sxfntZRfFAyODQVM6B7dWOE5GilSkqxoihMqY8SCdeZ2jrS:pKUelAq7Qu6DiSkqxoihMA6cr1UOnXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6d3e44b34ccfca7b894c464c51fcd73_JaffaCakes118

Files

a6d3e44b34ccfca7b894c464c51fcd73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e92f4ad5db587286906c070e54d9a1e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord519
ord666
ord598
ord599
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord537
ord570
ord100
ord581

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ