b906c8479548bff8071bfdb265d5772e_JaffaCakes118 | Triage

Sharing

General

Target

b906c8479548bff8071bfdb265d5772e_JaffaCakes118
Size

160KB
MD5

b906c8479548bff8071bfdb265d5772e
SHA1

85a974b3e9e1c1939631f781504db4d08403dc8a
SHA256

f4900b2f4875bf5884c68413a8a14e11928ead5025f62992fb5182dd60557d32
SHA512

f989edfddd4e0b98341e02dc0732ec044f2f28c26341557ce0e15f35ff7bc719dbd10763bd055a64b0e7276d3b223fc2d1f5574a8d59ebcadbee97fdbd44486f
SSDEEP

1536:zEgdn6SjW0PdQSfpMMY3eGRP7AEgdn6SjW0PdQStEgdn6SjW0PdQSG8MVx2tujF:z13TByl3eGRTA13TL13TistuxnY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b906c8479548bff8071bfdb265d5772e_JaffaCakes118

Files

b906c8479548bff8071bfdb265d5772e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a485562325e2f7a185f5690a7d2b099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord516
ord519
ord667
ord592
ord595
ord520
ord523
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ProcCallEngine
ord537
ord645
ord570
ord648
ord573
ord685
ord100
ord579
ord616
ord617
ord650

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ