d1e95854d040d2c87ac260f233164bc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1e95854d040d2c87ac260f233164bc6_JaffaCakes118
Size

430KB
MD5

d1e95854d040d2c87ac260f233164bc6
SHA1

943d4128e7057a3d1bf77430cbd6f482d407079a
SHA256

92c2a3a7937288dc0596080f49b5b96d3a41f98e448e0567796cc379913f0386
SHA512

8155cc3241be38822829fe78b3eeb936e0a06158585e68de8b84011eef731704441ebe73ea9e45f38e8e7997e4ec4205c16d1609aeff69e452eb729e62c4a5ff
SSDEEP

6144:HDuzsJS/A1jPhEem/bC9vqhUUmLoN22vFZDH:HDuzsJS/A1jPhEeAbChqhUUmLoN22NVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1e95854d040d2c87ac260f233164bc6_JaffaCakes118

Files

d1e95854d040d2c87ac260f233164bc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37a7e6b45711a4f582a0ac0c361c5628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord534
ProcCallEngine
ord644
ord573
ord100
ord618

Sections

.text
Size: 392KB - Virtual size: 390KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ