c781f739815be0613398e6d6a1777b43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c781f739815be0613398e6d6a1777b43_JaffaCakes118
Size

28KB
MD5

c781f739815be0613398e6d6a1777b43
SHA1

2ef6e8c5b141b97fa4537cba8375e93af7a7d2f7
SHA256

8962df68f363a1aeb442f79f01987508875e8a3a4f5d89e548833e075ab4f5ae
SHA512

949f5bdca547eb04c5121fbf929635be0db20de489d971d2f7d9f8c206921eda8d2b7268a8a7ed5de24d0f1cc3436ca3ba357918d2d97af781d3a7572563fc39
SSDEEP

384:yw2iaQUEALVTupV4xpIfCH5dK/jD6m0lsRdvSZpww:fxUE+VTuoi1bdw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c781f739815be0613398e6d6a1777b43_JaffaCakes118

Files

c781f739815be0613398e6d6a1777b43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

797edcf932259482e7138fc0a64fcad2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
EVENT_SINK_AddRef
ord528
ord529
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord645
ord570
ord685
ord578
ord100

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ