b09910355224f92b76985bd58e070300_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b09910355224f92b76985bd58e070300_JaffaCakes118
Size

85KB
MD5

b09910355224f92b76985bd58e070300
SHA1

722e6d17b102a7e7482d3af6466181f071193224
SHA256

283a20f8c6a7c75456713a7d628c1b1e81d96b5fe44c51e97b09dfcb025f552e
SHA512

cda60c10e1cba84e2806f399937f561e5539f56d56ccda25f8c9d0d9ebfd0f0c6c0a159adc12b30df29a0eb386c4767774d2c7610964f1c24acbe395f9bb4ee8
SSDEEP

768:lthNu8MFKb/PfE5mC/MtQ+/1GbnwDtbabnbGhWtX3ggue:/qEcUtQG1GrmtuT/X3L/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b09910355224f92b76985bd58e070300_JaffaCakes118

Files

b09910355224f92b76985bd58e070300_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85f0f3acbb9146ad7bfcdd916c867c47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord698
MethCallEngine
ord517
ord518
ord593
ord594
ord703
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord571
ord573
ord685
ord100
ord616
ord617
ord618
ord619
ord543
ord580

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ