b9dfe3ed475b3353107a867e4cfbe7da_JaffaCakes118 | Triage

Sharing

General

Target

b9dfe3ed475b3353107a867e4cfbe7da_JaffaCakes118
Size

576KB
MD5

b9dfe3ed475b3353107a867e4cfbe7da
SHA1

9d97e6e65c9308831a273c965d900c541dde5da1
SHA256

38e7558f0270378b48f0cec794e004ef101a9bf96cc570d8740460d21403c7ad
SHA512

e9ffc5b92285973d2aab9c0e29a4e254f20d4418c250a856f27f247e524fa8bbc785cd0f2fef1b16dd500d74f8262d7670fb2800b4951d5c88848754a599cb69
SSDEEP

3072:f2yfKkTri4f9wEn2SP+AQrrAwuyIsprMSttHNDn4Quu5UUz4+MujB5GoQVp83v2j:f2yTItPHBGp31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dfe3ed475b3353107a867e4cfbe7da_JaffaCakes118

Files

b9dfe3ed475b3353107a867e4cfbe7da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea64901e589957384fe1a5bee675d352

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ