b869e8e47810fb416f627242fa3a6c11_JaffaCakes118 | Triage

Sharing

General

Target

b869e8e47810fb416f627242fa3a6c11_JaffaCakes118
Size

20KB
MD5

b869e8e47810fb416f627242fa3a6c11
SHA1

102e7f7d81131d9ee54fe3da42f74758ea4b15cf
SHA256

d36f7aab7b03a022e58c706cf54f3c3587aef9e1edd1c06db14464cea7a36a86
SHA512

240c4149d1c3b501ca66676697e997e842c8804ea9ab5d35d9f08af3ef2f00631f80a959883ccf2e8afa4f48603a9f54eae69c6673b4a6f0677e58a987a56848
SSDEEP

192:Jp0+itofK97ILm4etyCE9tdE4etyCEyxWfqDg:NfK1ILTeodtdNeoSxWUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b869e8e47810fb416f627242fa3a6c11_JaffaCakes118

Files

b869e8e47810fb416f627242fa3a6c11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

618b46b737d647e49ac715a5b5900f80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord537
ord645
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ