b73f5d963c8f2988b7832988557088c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b73f5d963c8f2988b7832988557088c1_JaffaCakes118
Size

60KB
MD5

b73f5d963c8f2988b7832988557088c1
SHA1

ca7e3951976d8cbbf50d4840828e3fcce75df2e1
SHA256

a50cc1a50451412cbfea69b76947e3570eee72bb7c769cb4ef8aa3534958760c
SHA512

12288aac105e9198efbbb86859d2ef89ce1d4a26b74c051ada9bce2e1cd14d0141dcb9c0f9f4be8dd0416df83ff8fc7df278092842625e156ded2ff3a44096d4
SSDEEP

768:KKfcsKbkz06XD7W4l20rtDJbs8nJ6+I2l5pW8bb7ACT6PBg:le6XDZRXEnPBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b73f5d963c8f2988b7832988557088c1_JaffaCakes118

Files

b73f5d963c8f2988b7832988557088c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32ea1287ca774e0f9b48ae103b03061f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord593
ord594
ord595
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord681
ord685
ord100
ord689
ord616
ord618
ord581

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ