bc9773b6ca1c0f77717047d99eb7a34f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc9773b6ca1c0f77717047d99eb7a34f_JaffaCakes118
Size

1.4MB
MD5

bc9773b6ca1c0f77717047d99eb7a34f
SHA1

7dae0cf95c3fdf57fb11247d5665aeb1d96d9a25
SHA256

bd41314faa90bef83edf04652cc570f9031b1197d3be71e7f3801ca66b7d28da
SHA512

8392f424655912cfb056dbb31d36a8b383611e4a1fb66c9e12d73647e1248fdd24b14e110cd43621a7e01194167403bd571e54c91bc5b860b9f89211c7928855
SSDEEP

24576:jSN34xKDOIg5cCSk7o4SBOjE4+sVH2u1RL1nPjDWXKW+eGXHk2E34tCKUN:g4cftk7TSB14+dubhs+5E53Wl8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9773b6ca1c0f77717047d99eb7a34f_JaffaCakes118

Files

bc9773b6ca1c0f77717047d99eb7a34f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65f4d2958571a80d78566530d2650a35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord667
ord593
ord594
ord595
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord537
ord570
ord685
ord100
ord616
ord617
ord618

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ