b206a656dbc5026000696e6b25d0fe16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b206a656dbc5026000696e6b25d0fe16_JaffaCakes118
Size

152KB
MD5

b206a656dbc5026000696e6b25d0fe16
SHA1

686cb8faf440c9439f5ab6859e38a248d984882c
SHA256

17872ec16f5c1aae199e68f73c7190b6d8321383f777b7d17610dcc9851d2ad6
SHA512

532282462de312eed069db7d8111d9e570a8a7244dbd8d884257615f892e6d36d05a3bdc13d678a9bb4053e28b933ca1c4d17052ae7f3ddb5a4301f6ebe9bae6
SSDEEP

3072:ztD98uG17ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfr:ZBCNkVsuaRaU6mHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b206a656dbc5026000696e6b25d0fe16_JaffaCakes118

Files

b206a656dbc5026000696e6b25d0fe16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b1d59216013c9a811b52993a9074573

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord558
ord593
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord531
ord716
ord717
ProcCallEngine
ord537
ord645
ord570
ord648
ord681
ord100
ord612
ord616
ord617
ord619

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ