b896ff951abdfdd43a3d9f738be1a1b7_JaffaCakes118 | Triage

Sharing

General

Target

b896ff951abdfdd43a3d9f738be1a1b7_JaffaCakes118
Size

408KB
MD5

b896ff951abdfdd43a3d9f738be1a1b7
SHA1

8d12aa24d7704fffc5025cea28c05fd03ec154ab
SHA256

6c6c6979c5aa82cc111ffc0eba0c37cebb2ccde22a8310325f83017fe1669fa0
SHA512

8631cf932ebf9489b84c61522ee9b066850c8fb5bf4edbce818baf1bbb36e6771d7783025ab54a4f175bcb90be8f4cfd130b7161c13e165779effa4088e5c9f7
SSDEEP

6144:0Sg4eeZhpqZY5cRqCaN8C3xVUifgj5QBx+q8QhCqY8G64Msy4HMK:pbpTLBVUiI6BQE9Y364zR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b896ff951abdfdd43a3d9f738be1a1b7_JaffaCakes118

Files

b896ff951abdfdd43a3d9f738be1a1b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72746a5a2594734d651b4eed02d48d68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord648
ord100
ord612
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ