cfa6bd2e8019b3cb19e12b2ec920a75c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfa6bd2e8019b3cb19e12b2ec920a75c_JaffaCakes118
Size

24KB
MD5

cfa6bd2e8019b3cb19e12b2ec920a75c
SHA1

c1ce0a83bb6e5f9334bd0ac36bde570b61e6431e
SHA256

9635c6574b1f32227adb39ab1c303111e072175c1705e4522addfa0eae167d91
SHA512

296ad8360e5cfe38350c1e8daff7982e0d1a138c01b8bdd949769a3af238a1f91bfb430ead737ae722cde9952a076db07607f4447c4140b36d326f58d342063f
SSDEEP

384:2BgDcGm8B9ZCV6KVnSr3iV1550+3jkQLNVxJXH3yU:FDGI4VP8Yv2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfa6bd2e8019b3cb19e12b2ec920a75c_JaffaCakes118

Files

cfa6bd2e8019b3cb19e12b2ec920a75c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f95c4994e6891eabdab6bfa50368f207

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ