bbd825eff63b3ac3720bd8171787a227_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbd825eff63b3ac3720bd8171787a227_JaffaCakes118
Size

812KB
MD5

bbd825eff63b3ac3720bd8171787a227
SHA1

7ac364534039307d0a9da2332fcc9bcca8d5ed08
SHA256

9c04b8eca5e9d755f5980bf73b58937aaabbfa5fff50978c94c328cad25c0810
SHA512

01fd720565b0bef2ded52d5e6ba16292141677aa6f16487c517460e5367ffc4a67afecb1050c12d313f39f8bd97123dc274c5e0abef1bcf9e6c04c0b5fe437a7
SSDEEP

24576:uPk9MKcXtgXtUCU99MKcXtgXtdXtaXtYMKB:uicXtgXtjUjcXtgXtdXtaXtW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbd825eff63b3ac3720bd8171787a227_JaffaCakes118

Files

bbd825eff63b3ac3720bd8171787a227_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37a507ee228afca59ba6206f94815a8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord100

Sections

.text
Size: 632KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ