c77a97285a160dc141efe1bb1c4c073b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c77a97285a160dc141efe1bb1c4c073b_JaffaCakes118
Size

256KB
MD5

c77a97285a160dc141efe1bb1c4c073b
SHA1

d3d6a46cc0b1ce20e4d3a75b52f9bfa3c35901be
SHA256

b8068ed24bf1aedde20f7f96c7a8f56b9ecfb1d6d8e90666abe41c22a2ba83a9
SHA512

a2874d296a6645e7c7867e80a6645a8ad24bac064810f60cdb457bfcee35e79ea3a8765c465089c97837e2f9cc7e6a1e2b362c034e83c694934b45a85ef1f8f6
SSDEEP

1536:DCqMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wmDaMnqL:cX0e1FB/DpKjCLHAmDa4bi9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c77a97285a160dc141efe1bb1c4c073b_JaffaCakes118

Files

c77a97285a160dc141efe1bb1c4c073b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ab5c03135361cea3dd39c82f70b713d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord606
ord608
ProcCallEngine
ord644
ord537
ord572
ord681
ord100
ord581

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ