daf9c233447abc3c94d1eff2befaf17c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daf9c233447abc3c94d1eff2befaf17c_JaffaCakes118
Size

408KB
MD5

daf9c233447abc3c94d1eff2befaf17c
SHA1

abd7a80336aef28a6ca5ff1beb23d844b2405c46
SHA256

740b03fbe09e1cbf5fc00f3f9b823d14c3382caba9b0572cd406cdf4b4b35bee
SHA512

36dca90ba334b5f0d16285bb89ef78d2dbe3e9068dd80fce25965a3deaa8b075e7c6259f6e22888bc3da9af834d42e216f1c833c0596c6a8f855b7fbf6df11dd
SSDEEP

6144:2wGKg/Zvn8DcBXMZ4Oj7Sy1/3LlE1sC2g0S0Eslsywf1gzToV:2JJn8DIXTOj7rZE1L0tlCgz0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daf9c233447abc3c94d1eff2befaf17c_JaffaCakes118

Files

daf9c233447abc3c94d1eff2befaf17c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7afcb326588c0b9fd32c6a3e2b565ee0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord518
ord666
ord520
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord531
ord716
ProcCallEngine
ord537
ord645
ord570
ord648
ord576
ord578
ord100
ord616
ord617
ord618
ord580

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ