c1c593d7fdbaf484edd4d0e266e75429_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1c593d7fdbaf484edd4d0e266e75429_JaffaCakes118
Size

260KB
MD5

c1c593d7fdbaf484edd4d0e266e75429
SHA1

876258d8861f355a7b0b3292d52eaf9b20365aab
SHA256

5bf734eccaa63433dde21cc7bc76c789def2e977af28de41ea2627ac037ba4a4
SHA512

a7e60f93a8836e975a6ba5672b1717bcd635e0e591af95b80ab066788e1c8eafeb6b302d403c59fa7b04739fc06d7b8cd8d5d21faabf03fe57230ac5cd682a5c
SSDEEP

3072:QpAtn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4ED:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1c593d7fdbaf484edd4d0e266e75429_JaffaCakes118

Files

c1c593d7fdbaf484edd4d0e266e75429_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb21ecb4548c6943a3a6db57a9aeaae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ