de067f1f4f238d8d0ea70d8f05aea466_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de067f1f4f238d8d0ea70d8f05aea466_JaffaCakes118
Size

24KB
MD5

de067f1f4f238d8d0ea70d8f05aea466
SHA1

8156c645fba87654f20a93a0fa2c1bed52140007
SHA256

def666e36aac4c1aeb2b906cb55d9e1252ed68484a8dbdcee04d1bf1a883a996
SHA512

a65493fbf01af40d48dbf2696066552b5e8086836e71199c3aba559295f87cf6e73c0161aa65c4d2fb579a9f45f550a6fb22e77cd0a68272a719fea78d99b944
SSDEEP

384:al6wFe1YRT5QdMCQkes89u8kDIX8QDIY8fbD7G9v3CQ1:aRC4YZQrsdF0XR0YaTpS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de067f1f4f238d8d0ea70d8f05aea466_JaffaCakes118

Files

de067f1f4f238d8d0ea70d8f05aea466_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4552f3f54c19f91904a61d2ae4cba688

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord685
ord578
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ