aa70d9cc5f08c04d47fa21f43521c2be_JaffaCakes118 | Triage

Sharing

General

Target

aa70d9cc5f08c04d47fa21f43521c2be_JaffaCakes118
Size

148KB
MD5

aa70d9cc5f08c04d47fa21f43521c2be
SHA1

23bc65df0094b5eac037c9efcd43b6b62be8a0e3
SHA256

73821a5011707b3a4a94154b58bd08850390109d5ca978b80ae2f3b29e468c36
SHA512

296dec70a7c4391f469aff533bd90d80471b5778a1c1b34c722dd00c8160c98f73191b323a1404f2fadf05b574d764d3b4f7c6f1c292667191a484eb7884b7e2
SSDEEP

3072:VTulR4tkkJG7IZ+P5C9yHimYToSpDumIBlbjKAqmIfCyI:VTulsyHimYM6qd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa70d9cc5f08c04d47fa21f43521c2be_JaffaCakes118

Files

aa70d9cc5f08c04d47fa21f43521c2be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69fb7661dd6407b7b39996f16a267ae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60.dll

MethCallEngine
ord516
ord665
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord572
ord681
ord685
ord578
ord100
ord581

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ