b6af0cc1bdb4f751be17a17486113be3_JaffaCakes118 | Triage

Sharing

General

Target

b6af0cc1bdb4f751be17a17486113be3_JaffaCakes118
Size

268KB
MD5

b6af0cc1bdb4f751be17a17486113be3
SHA1

b8a7eb9162f081bfb021ab13ddce7847b6bb30ab
SHA256

c62a4c084e3af61e119711d7365c273e018b384e79de36d371b2df33a41a923f
SHA512

55edb2c3ce9194045245c99856f9ddb50f6fcf7b40866d7dfe76befbbd151aef39db91321e5904915b4628823dc48d12dce5faa393652cec2b5de44e40f39aba
SSDEEP

3072:62sIXhmPP1X9109MeVIEqZbzWw2D5gw1MwOZ:MdX914M4IEqZIgq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6af0cc1bdb4f751be17a17486113be3_JaffaCakes118

Files

b6af0cc1bdb4f751be17a17486113be3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90827321ccf0a1f6aa4e9d2bfb87d444

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ