c7e42f6208eccf0bf6c393c10aa46ee8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7e42f6208eccf0bf6c393c10aa46ee8_JaffaCakes118
Size

304KB
MD5

c7e42f6208eccf0bf6c393c10aa46ee8
SHA1

ffd8c18bb466ddf2efd0f4f504cc5ed0b014ee3a
SHA256

7a6079eb40334d0ba508818a65da2a3b99acc981a7af7644a207d80754b16386
SHA512

04e6eafa488c5ed807d33c9c178672b574ea4c588e8a82b522ae072565a2a5821adb8d6a8d678fa32f33ae1864865e5bc54329442dec004dbfb2f7e98ae692de
SSDEEP

6144:q6Tz/xuufh5ug716Zpx3//WY6ksclxHJv/YW993Clek2Pk:q6Tz/nfh5eZpB/WpEQGYEnPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7e42f6208eccf0bf6c393c10aa46ee8_JaffaCakes118

Files

c7e42f6208eccf0bf6c393c10aa46ee8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6031fb50c2543c3fa8fa23bbd6e3f3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord573
ord681
ord578
ord685
ord100
ord616
ord617
ord618

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ