c7bf1128167ee15f474fc93f9950697d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7bf1128167ee15f474fc93f9950697d_JaffaCakes118
Size

112KB
MD5

c7bf1128167ee15f474fc93f9950697d
SHA1

1b9108711cb490a1c648fdaba81f890205362605
SHA256

70bd1b5cc7bd137bd235ad53f22ac1ef17231b77cd894be034f1939a8cbd82c5
SHA512

9b02e208509d8f235b80e280b66a0e11b7ce1ffac4a48c1da24c34317f7489287b237165a065f6deeb0e0b29c344c33ba2affe234623d57d03e12b91f1748f43
SSDEEP

1536:CXul358Im3WBwrINKW1FWlP7oUYwUpNY9iia8nN:21CKWmK1WN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7bf1128167ee15f474fc93f9950697d_JaffaCakes118

Files

c7bf1128167ee15f474fc93f9950697d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

623b01c749e3f2000a0e04cb4c779763

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ