cfc6ff24f78fcbe15ca38019c00a7477_JaffaCakes118 | Triage

Sharing

General

Target

cfc6ff24f78fcbe15ca38019c00a7477_JaffaCakes118
Size

40KB
MD5

cfc6ff24f78fcbe15ca38019c00a7477
SHA1

06e23dfd7b39ad99ff004877e82eb3590afed0b5
SHA256

0eb6fa32164c5135e730fa990bf904c424336550f64dc77e5a7ae7c64312c411
SHA512

5a889d2ff4f4c55abeac7a515f92542d7f62c694d7954af0c563f7381ce0e2f75e99f89698164ac5a259f2e6ab8998f886862172d069b7529abeb7879e19be86
SSDEEP

768:FfsK5sAQPqv25Drs8iDZFptyWzoksLq025:ZsKSL22yNzodm025

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfc6ff24f78fcbe15ca38019c00a7477_JaffaCakes118

Files

cfc6ff24f78fcbe15ca38019c00a7477_JaffaCakes118
.exe windows:4 windows x86 arch:x86

464bf9f0386a7c380a46deb719b9ed5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord519
ord666
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord716
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord572
ord576
ord685
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ