af4cc911dd8b7046880ede6b8e4aa975_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af4cc911dd8b7046880ede6b8e4aa975_JaffaCakes118
Size

297KB
MD5

af4cc911dd8b7046880ede6b8e4aa975
SHA1

a97ee1fb92253681b90ecd21e7fadac88e13f564
SHA256

8f1fb3b2603d6f317154f95884e082dd269d59ac573e5b1a484d80cf7ed519e3
SHA512

520c9a0b0f681adafe1818192b97cd089b8e01bfd3395100a9625058c0989514af874c9b30b1685ce2dc9985a4d3052abc52b63da2c44ff65061a50d3d452f92
SSDEEP

3072:SIdcFLEdskgrt05bnwhVh6PTP37FQbxVgXMR0frEJOlz9Rs8lmzezS0+:fWjZ0xCVh621XCrEJa9RGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af4cc911dd8b7046880ede6b8e4aa975_JaffaCakes118

Files

af4cc911dd8b7046880ede6b8e4aa975_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

veyfbtk
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE