c87caedb1e3e46f5a79b8891bd43be35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c87caedb1e3e46f5a79b8891bd43be35_JaffaCakes118
Size

36KB
MD5

c87caedb1e3e46f5a79b8891bd43be35
SHA1

bc0b74e0a75a8e1fc9a8f5b83d3b9afeaf98ea49
SHA256

e1a8f006b82eee9858d4289fe00e73ca0246ad497dabcaff6134ea91b227c8d5
SHA512

2236e2285324211bc2583882b15694f0cecb4033050df3b4aa467ac7cf6361cea15833a2624bbcf5428c96b4f0d837fe84500cd469c88c0c80a22ccef10161f0
SSDEEP

768:vkUWDwb1NeKe7Bq6LNhTzrBVSpog/7A1aVvlTN:uExNbelnVSW6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c87caedb1e3e46f5a79b8891bd43be35_JaffaCakes118

Files

c87caedb1e3e46f5a79b8891bd43be35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebdc8c51edb8f7609de451d8fab164ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ProcCallEngine
ord535
ord571
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ