defd3f6eb5aba3b11669f2ed50b77de7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

defd3f6eb5aba3b11669f2ed50b77de7_JaffaCakes118
Size

300KB
MD5

defd3f6eb5aba3b11669f2ed50b77de7
SHA1

09a02f7c09e765c24015e14384b487dc09d89b8c
SHA256

6cd624607a895ffc5f7a99b08c42dd669a7f0ab84ead7f54aadbc87d3f24e18f
SHA512

6f055b141c7595d3f463dc2c6005dc4cf6f08519f16ce0ce47027f70af2cbf896b577c18eaa5fa96db2fb57f71a9b91fc4204622ac9726372c22a34a83c8f537
SSDEEP

3072:QBu0t6ndFaBzttFpADIG/U2qoQMy4SqzsOaanqatawaaaaaYmJP1Rh:g7P1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
defd3f6eb5aba3b11669f2ed50b77de7_JaffaCakes118

Files

defd3f6eb5aba3b11669f2ed50b77de7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f497e8fdafdf03bff86da8f9623a9186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord716
ProcCallEngine
ord644
ord537
ord681
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ