c1ff1b0a0b2bcff1bc79864d01ab38ef_JaffaCakes118 | Triage

Sharing

General

Target

c1ff1b0a0b2bcff1bc79864d01ab38ef_JaffaCakes118
Size

92KB
MD5

c1ff1b0a0b2bcff1bc79864d01ab38ef
SHA1

56ba26c7f6a0cb4023991ef03724b49a732cc21b
SHA256

f0d44c6078ed90e387c482bcba49cdd526312d595f0b41832f6adc7361876c17
SHA512

48093b829048ca825eea4bc2dbe07da2aeb60de92d564c12d4908b2300381135aa1106b8c1110232ba21c161dea0b8dbee6c76bc454c74f0360f423f1ed78956
SSDEEP

768:VITZFLXUwNg4Q6uxh1ltKJfJS0V9YuGN9NjOjjjjw0i:wZFXl3QDaSs9XGoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1ff1b0a0b2bcff1bc79864d01ab38ef_JaffaCakes118

Files

c1ff1b0a0b2bcff1bc79864d01ab38ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9416b8a5e4edee8e99f2fb6906de926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ