d7065fb6906c9bbf9d775df35912ecae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7065fb6906c9bbf9d775df35912ecae_JaffaCakes118
Size

56KB
MD5

d7065fb6906c9bbf9d775df35912ecae
SHA1

c773a891e64a6fdea03899a4cb6b3e8d2241db30
SHA256

6964c8791bbf63ce0cf1dac7e62486fd3398d16c72774904fd3a7ca4f3957fff
SHA512

3f415e3bfc360f28a694f436afd1d83f67a247584ce3583d6bc0013c5cc4c021f86bcea3cf67b29fdb0625d5cd9ffe287a58989f1d208ae0849be66ff0ff0cba
SSDEEP

768:dt4KSjD3aTda5qlzI3ybyv7kW2WA/TzHU2sOoTYaE5TyKrpM:dt4rDxybyjkW2F7zHmC0KtM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7065fb6906c9bbf9d775df35912ecae_JaffaCakes118

Files

d7065fb6906c9bbf9d775df35912ecae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a8427d238cc91cb681221af7e9baf84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord660
ord557
ord666
ord594
ord596
ord703
ord525
EVENT_SINK_AddRef
ord527
ord568
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord717
ProcCallEngine
ord648
ord575
ord100
ord547
ord580

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ