b83fd97689efc5cead3ec198418362e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b83fd97689efc5cead3ec198418362e0_JaffaCakes118
Size

68KB
MD5

b83fd97689efc5cead3ec198418362e0
SHA1

19501faeb60e6331cf6fdb8e3723a74f493e75cf
SHA256

15c26b9dc8a1775c6491a97f9a8e7811c46cd55d76f6f514d249e431d787870c
SHA512

a2f5303e92fd005921da72716c8e24c26157e00fa075cb23c9a357b4ec7be78198b597dfcf376992aa161934847052dde4a37cabe7b23a2f4e6dd56367e5b1d2
SSDEEP

1536:53oe7ZOlpXzkhU3BUAUskH/qJ81MwRALP+Smepf:2e9OlpomUAUskyJJwRArMep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b83fd97689efc5cead3ec198418362e0_JaffaCakes118

Files

b83fd97689efc5cead3ec198418362e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c86b232d74210fa81ca72b0f08a40ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord581

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ