b12cbfa8ac638e4717ee33f2b006bc65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b12cbfa8ac638e4717ee33f2b006bc65_JaffaCakes118
Size

20KB
MD5

b12cbfa8ac638e4717ee33f2b006bc65
SHA1

34b558fd8551d1f514d3a2caee343c2d46b56f5e
SHA256

15ae1ec96a7e5c5e2a18348b155d7feaeefde737cf8b61319d3be8130e09fee8
SHA512

a9e2f3b844b49a84cb12f679a023e65dbdb032b7b0ce1f76c3c0e66cc56a32c2405aa385ba20f2faee4227e8ccf2db6f3c45f67470ae943c8db56c2408739981
SSDEEP

192:GQ94cxlPJfBwhneSZUM0M/R7HlkN74HuO7VAb6QI:ndBoZUM0M5hkcwbPI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b12cbfa8ac638e4717ee33f2b006bc65_JaffaCakes118

Files

b12cbfa8ac638e4717ee33f2b006bc65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d018dda23c54049adb79d509ff066484

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord520
ord631
ord120
ord0
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ