b65c10584f2e610186c2de99821cb48a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b65c10584f2e610186c2de99821cb48a_JaffaCakes118
Size

24KB
MD5

b65c10584f2e610186c2de99821cb48a
SHA1

6a8a647a9746b20efe89b95952ee70cf097a2fd6
SHA256

aea8ec7f4c676b8369c747c850bcc1df51892c67368b4fe2e06380fcb08d1a24
SHA512

7eeca064cfa32bf1de524f7f714a2137055e5c2dea4112b44e69e17a50b8819196a7c237ff32db16aa346f6a1aaab36fcd72bac615528dbd7056b958d0b8d140
SSDEEP

384:U0ttDD74mVaNjdqHH2hS4wkkWHH2hS4wkkQo:U0rDD7JVWcbkPWcbko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b65c10584f2e610186c2de99821cb48a_JaffaCakes118

Files

b65c10584f2e610186c2de99821cb48a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ