cf66d4611f453ee9c20c27c474fa872f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf66d4611f453ee9c20c27c474fa872f_JaffaCakes118
Size

328KB
MD5

cf66d4611f453ee9c20c27c474fa872f
SHA1

d6cfbc8e80c7a9f90c4fecd970d73316e95a3b33
SHA256

1dc8f138385748b2524f2c2659d8885bb299fd674a0896552176d585d2dddbad
SHA512

0a63d1dcf5b1e7f6cf30ab96c782948b6e80e25068c474b218ea61df78d029cbbeaeb29a9bb1d93b34993f98b6109164987ebc9b3367fa108ec2d8ac7ee22e90
SSDEEP

6144:TlZF6unwNh9ooHxWUE0VgzO9NYn86eaMfeICQf7HhoSlExO:vFBwhN3VEkNw5MG5KVoSqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf66d4611f453ee9c20c27c474fa872f_JaffaCakes118

Files

cf66d4611f453ee9c20c27c474fa872f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cce2bb5e4edd3b6da9c151f2de9ed41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord570
ord578
ord685
ord100

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ