cf167b37040078d9a400049488b6c154_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf167b37040078d9a400049488b6c154_JaffaCakes118
Size

207KB
MD5

cf167b37040078d9a400049488b6c154
SHA1

f5f9edf18c7bc9762376d56446f99c602191ff95
SHA256

e3af8cc71fe9f56bf90ec36047195135f5e46b0fe13f2371e1fce3dc6a91ff47
SHA512

fc97a50aedd935da719f63b38442253703f2c46d002472c12dbde06b736578c3ccfb0fd805983c7a93bc25538d9632ae620e192a97d506f0ce81d4337147f926
SSDEEP

768:Ll74GBsISuEHlbammnlTer+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfql74GE:ybHmECZ/nEkh8OTKNKbHmE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf167b37040078d9a400049488b6c154_JaffaCakes118

Files

cf167b37040078d9a400049488b6c154_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3014100170185c2b9a504ac2eb0b6840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord619

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ