b10f2a8ebef3b603497d7c1f14f046ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b10f2a8ebef3b603497d7c1f14f046ba_JaffaCakes118
Size

437KB
MD5

b10f2a8ebef3b603497d7c1f14f046ba
SHA1

5da00fc1224d7633697efc7461af8f093767b826
SHA256

1e1f8d4d5964205f9221e292a9076c3a9b20799c7ce41e3f54f4a5fd215f7038
SHA512

bff4a08e442f873c7b2f8445f6f0f1c6deb67da5f329b0ae0257c42bff113016c51835bcabe6ef252d316dee562297edb6766be1404a15e80dd11eeab517fb27
SSDEEP

12288:z+uXYRhStJe+IZ0zJ5UUQmK02EGZ9LjAq:iushijICagK02T9L1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b10f2a8ebef3b603497d7c1f14f046ba_JaffaCakes118

Files

b10f2a8ebef3b603497d7c1f14f046ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b705ce24e13cc09c88402c261740dd29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord573
ord681
ord100
ord581

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ