c874f69a4ae581c1bd03c2a703bad5e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c874f69a4ae581c1bd03c2a703bad5e6_JaffaCakes118
Size

44KB
MD5

c874f69a4ae581c1bd03c2a703bad5e6
SHA1

3dee06bdbe804efcd5e12e5c7667300cfa16dc71
SHA256

a794995abf6494d9ff98f7aea00332c61825972a30c6798b5fa10798e4ed969e
SHA512

672d141052972fc57838a99221da5f5d82d9ad4c9f366452f067bfdec95652d73dce42e5477f7fee7930861efc12f014abb104b6f27e73aa83b0d47425342c9d
SSDEEP

768:VRQ1Belc/sqxg6dk2Lf1wvvibfCitqbMi6V7A91zhszb7U:L6dkawXibfTqb5C+sU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c874f69a4ae581c1bd03c2a703bad5e6_JaffaCakes118

Files

c874f69a4ae581c1bd03c2a703bad5e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd6ee25d1d5189b05156dc4b7d205328

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord667
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ