cf16ba602a2f945013bb54eff74dc11c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf16ba602a2f945013bb54eff74dc11c_JaffaCakes118
Size

244KB
MD5

cf16ba602a2f945013bb54eff74dc11c
SHA1

b18ea541bc3d3d45801ed52ea523d2f3a6f4e58b
SHA256

ac1f9300ef0f2ea987f5303dadb3b6ef9f19f363000b3c274a2eed015c3dd96d
SHA512

37df2f8e0d728163004f75db1abc6ae3d9c5010b16a7e30139c7aaacbf835b6d00dfea639aa76c0889f80f38ddab3df9feb286884edb177be9cc79d565cd8c50
SSDEEP

1536:mcMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wmthyqhuc:mPX0e1FB/DpKjCLHAmnybc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf16ba602a2f945013bb54eff74dc11c_JaffaCakes118

Files

cf16ba602a2f945013bb54eff74dc11c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76620cbe5ce210ce23c00ff775771ad5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ