d6a0ab67de4c63c6392d45a2c5052db4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6a0ab67de4c63c6392d45a2c5052db4_JaffaCakes118
Size

144KB
MD5

d6a0ab67de4c63c6392d45a2c5052db4
SHA1

7a7824ff107ea0a1aec2dbec515b970fa43393e5
SHA256

12a6dc882d5aff0f0c56eccbf2386306c7c1543c4c0567e1a1d51169bf06b347
SHA512

8d79e0bc54cae7200f1932ce41c68285dd5466eb93875ea6cf24eea54fa52603046158f519ef1bac37ece01b29649886d6e656cb086475458a87bf61ed37734a
SSDEEP

3072:DbZKloQSrkKgRENEI5apGTwQqVMTW0hiJDeaCD1so:Dp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a0ab67de4c63c6392d45a2c5052db4_JaffaCakes118

Files

d6a0ab67de4c63c6392d45a2c5052db4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b2ee9e8d9c837208433f1c769c736ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ