b9e067aa2393ca6b21c7186063ccd656_JaffaCakes118 | Triage

Sharing

General

Target

b9e067aa2393ca6b21c7186063ccd656_JaffaCakes118
Size

80KB
MD5

b9e067aa2393ca6b21c7186063ccd656
SHA1

7428fe028d981dcc868225d5bf11ee2527079e53
SHA256

4c6c6246557fc6d7038bd3fd0d158419670b2d3441b626aa8b7fd337c4a66336
SHA512

2f3e1eb3d5460f312c82edc6d7f9efba41f49a405fc2cd086255e37f09a8f7f31cf2c4ca0a7a784f64c88eae782fe9663638b44456245031a324e1e96979370d
SSDEEP

1536:gVBs3Iko5GPXtFDmyBq/agI7Z7XMvlNjMDcB:6sYko5GPXtFDmy8/ad7Z7XMvlN1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e067aa2393ca6b21c7186063ccd656_JaffaCakes118

Files

b9e067aa2393ca6b21c7186063ccd656_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3c564f72388db94b8f642821d9e4cc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord681
ord578
ord100
ord579
ord616
ord618
ord619
ord581

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ