b9fdf29bd20882e2e3e47eba1939fa38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9fdf29bd20882e2e3e47eba1939fa38_JaffaCakes118
Size

604KB
MD5

b9fdf29bd20882e2e3e47eba1939fa38
SHA1

b0fbbf3d67ac82fc0c98133cd2202e715d1b09dc
SHA256

0c0008fb246368f73b9ac9e568913402ba148369e69065c50f3b4fed81c1a16f
SHA512

4b7f87b94291541407d39811560d6841694418a71782666b76b609cff9263f9d49081942dfd193bf0cea4f20106ecab1b102a781faa4232e0f614b355cb5000f
SSDEEP

3072:Uz9Qx+gmEEmL55a+RDF4D/EUAWwE4y7Y8SQRCyhh10+O:REm15BF4/Ah5y11hh1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9fdf29bd20882e2e3e47eba1939fa38_JaffaCakes118

Files

b9fdf29bd20882e2e3e47eba1939fa38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1be56ea2ca851fe8f691f7872f9104f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord595
ord303
ord598
ord309
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord681
ord100
ord616
ord581

Sections

.text
Size: 596KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ