b063a2245fefce1fac8c3e6ec39cbf9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b063a2245fefce1fac8c3e6ec39cbf9b_JaffaCakes118
Size

468KB
MD5

b063a2245fefce1fac8c3e6ec39cbf9b
SHA1

bdae889e74003031ef6421857479f0f29fae7692
SHA256

d8b3d0ee71226a910ffe0c672ded69aafb3cc883d220cc4d97d3251e3f9be988
SHA512

474515442e1f689afbff391800dede59108f01ba99606c0bf74d4bf2a5d228d15595f80c254e2ee9a9ea094366fcf488bc74e984da66ed720a166b39e8a93552
SSDEEP

3072:Bzj0LGJzleSTjYZRNVaizKCTyufOeapoxxYVI2r2H21ywqySfcPrR77wCdTwdk0l:BBXv1izKCVO9oxarJRD0Ni8MB1xZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b063a2245fefce1fac8c3e6ec39cbf9b_JaffaCakes118

Files

b063a2245fefce1fac8c3e6ec39cbf9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83426e8495248da223047a6ef5ed55d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord660
ord300
ord595
ord303
ord304
ord598
ord306
ord520
ord309
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord563
ord564
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord606
ord607
ord608
ord317
ord318
ord717
ProcCallEngine
ord537
ord645
ord572
ord573
ord681
ord100
ord689
ord610
ord613
ord617
ord619
ord543
ord544
ord546
ord581

Sections

.text
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ