c83b3c105d26279efcf563df4b751c00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c83b3c105d26279efcf563df4b751c00_JaffaCakes118
Size

92KB
MD5

c83b3c105d26279efcf563df4b751c00
SHA1

d569a33b909442ffd4e0a269ffbbc208ae54fc1f
SHA256

d07555b77cd2d527fc7dbcb7b05cdb1eff95b090791c8b098c92d657010066a6
SHA512

c03588d8a07686bfa79d6f9879365f740736bf3694cf6d98db065bb5d16a1475083b8ee7708dcfcaeed91f501e43cd2ee0f3dc4085233868ac59317b8cea6443
SSDEEP

1536:bO7mk3DPpulHmPXGEMofA68aKA5G+iU0Obg8:ajDPpu+2EMofA68ad5PiHv8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c83b3c105d26279efcf563df4b751c00_JaffaCakes118

Files

c83b3c105d26279efcf563df4b751c00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61e9bc3ec214be32e814fb45f81da4e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord519
ord660
ord662
ord592
ord595
ord303
ord598
ord599
ord309
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ProcCallEngine
ord537
ord648
ord571
ord572
ord573
ord577
ord685
ord100
ord689
ord616
ord617
ord618
ord650
ord581

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ