dba782fe8d3ad178ee3db33e6f1f3b7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dba782fe8d3ad178ee3db33e6f1f3b7d_JaffaCakes118
Size

80KB
MD5

dba782fe8d3ad178ee3db33e6f1f3b7d
SHA1

503b2917d9cceb40b7a7902bf1eddf91746c50ba
SHA256

768f25e139263c86aa322dc577a4f833c77546721b16ced0844867e40cb1a594
SHA512

95e11d0c64cb577f0faad64bba51b0413e8834fb39b32316bd2d4a440151be56e8617e9f130b3288c979f448cf8c4f1e33a68a825c4ea80d1e04aa0a08ae8688
SSDEEP

768:Hsl0zE22U1yDHqkEctqE0n/Uxs8j78H62htpmughjn/svtvYsTgI9XPv8tEM:HsaN25HMc4E0nqsRuughrENRPv8tEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dba782fe8d3ad178ee3db33e6f1f3b7d_JaffaCakes118

Files

dba782fe8d3ad178ee3db33e6f1f3b7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d8b7af5fb5b678bc7164600fef2a139

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord516
ord519
ord626
ord666
ord667
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
ord670
ord568
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord714
ord608
ord716
ord531
ord532
ProcCallEngine
ord537
ord644
ord570
ord648
ord681
ord577
ord578
ord685
ord100
ord689
ord616
ord617
ord619
ord546
ord580
ord581

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ