b9113e6abcdcce6ced362d8140117211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9113e6abcdcce6ced362d8140117211_JaffaCakes118
Size

108KB
MD5

b9113e6abcdcce6ced362d8140117211
SHA1

6ece41d49120188e85e7ab5c1a9c396f75369e0a
SHA256

c582c05b17a8d66269def5dfb5098046fd70af2e55bb6667172498e7ce2abce8
SHA512

e76cb453413efa44ee1fa964b93b5797eaf2209e620399a2e52ed6b5e99efe1424fce7aa0cd15088eee630b130ddcad3675fee28043a4c0686ce473b781bfb4c
SSDEEP

1536:a0PUR0cf+ySvmnDUc3UhQ5VxQqzehDUR0cf+ySvmnDUc3IS:BP4X+/HhE6iehD4X+/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9113e6abcdcce6ced362d8140117211_JaffaCakes118

Files

b9113e6abcdcce6ced362d8140117211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1235ef23df4229d7ab5d6376dba9647e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord531
ProcCallEngine
ord537
ord645
ord572
ord100

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ