cf602d6eec94f825a91fd2158dc672a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf602d6eec94f825a91fd2158dc672a3_JaffaCakes118
Size

36KB
MD5

cf602d6eec94f825a91fd2158dc672a3
SHA1

cfce74fa0ff6000ea0f414770a78878b9901c386
SHA256

f07d8e4a1fae906a4cb7fa17db4bd2b8d5540fddff143b42198571be0255e9e4
SHA512

b6767b390cd2f28349fa684685cf57ae1d81521a73e83de2dcf6b0ae1725c423e80a0c6034e485802ff37213534e9ed95145f4ebaf4a7f213475c019c2cbe0d6
SSDEEP

384:G2wwR/x24w8lndrYsHvndru6t0LnWHQnuv7J/5X4XuEkndrTlndrYsHLx24w:Xp24RdRPdQn2Dv7J/5X45kd9dR124

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf602d6eec94f825a91fd2158dc672a3_JaffaCakes118

Files

cf602d6eec94f825a91fd2158dc672a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61c7021c563db293e62108000cae5c1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord520
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord536
ord537
ord648
ord571
ord100
ord613
ord617
ord581

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ