cf963f1794357dcf875a5e7dc84c80ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf963f1794357dcf875a5e7dc84c80ea_JaffaCakes118
Size

248KB
MD5

cf963f1794357dcf875a5e7dc84c80ea
SHA1

ce8d577fab04c5587f7e987a649747ae31a38807
SHA256

921ebde14300393f01dc61af892a91546d1722bacd82d83db55b02e6a00790bb
SHA512

9576ba10cc36e4cd8c89b2e46c48b5d50be889e3848d7868c9510ed9eb830eb7bdf48dc1bef866bd56c53b52ec4c3408bcb42ff2b2444cd0b5bd822778070d78
SSDEEP

1536:QMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wmuRCb91Dp:DX0e1FB/DpKjCLHAmu61Dbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf963f1794357dcf875a5e7dc84c80ea_JaffaCakes118

Files

cf963f1794357dcf875a5e7dc84c80ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c3fdd15d581305fc640c90bd181a434

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ