bb67d71e438f6ec453abcac349382674_JaffaCakes118 | Triage

Sharing

General

Target

bb67d71e438f6ec453abcac349382674_JaffaCakes118
Size

40KB
MD5

bb67d71e438f6ec453abcac349382674
SHA1

19a68a2f6dcc276e7496b6d204c95317ddaac8fe
SHA256

486edad63c777cad032c98c612489ca2d45c08d1d327072c3d727efa818e1bd7
SHA512

d7d08dbf1c1b11c9b19bf528314620e49b425bad7acd42d3e0f2020dd5aea3fd71089fa5b6f9a6bb8da9139b96afc0944b755a60b55ed199f1f7d723c0860d27
SSDEEP

768:gO8lb0B/uXE62fpnz/tMQQM0LZ7/qMRUBaAhA:Hb62fNz/tMQQM0LZ7/qMRUBaAhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb67d71e438f6ec453abcac349382674_JaffaCakes118

Files

bb67d71e438f6ec453abcac349382674_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7167c41d4bdd4f928a49ea90f51d326f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
ord529
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ