b720708dc40260f238d54472c9eeadbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b720708dc40260f238d54472c9eeadbe_JaffaCakes118
Size

32KB
MD5

b720708dc40260f238d54472c9eeadbe
SHA1

be7f0b5d4116016cdef1106a188c93a12141ad1a
SHA256

f67d2f9ebfec7aa671cbf955c4d57b848f291133e9f13079ed4164c22e9fddc5
SHA512

22c43aeba8b9b07234526d3ccde5de8154868bff49f21781ca9335c25db4656a1e0dccfd42cf716e77f85cf6432a7a6e62cb96a09d24dbf055780ee14cf38091
SSDEEP

192:Rkt47XmFGT5lZHeH9hRVB1C7+d379Nk6XIYoXcpO3GyePxU96VFGOrYIZErnwNsx:qtunyHZjNpX46O3GyePxGsqIZE+Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b720708dc40260f238d54472c9eeadbe_JaffaCakes118

Files

b720708dc40260f238d54472c9eeadbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6435960ad9eddcd98dba64c52fc3b0ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord558
ord666
ord595
ord596
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ProcCallEngine
ord537
ord645
ord578
ord100
ord579
ord616
ord618

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ