df43de65ba4187254b8b650aa7dc8d02_JaffaCakes118 | Triage

Sharing

General

Target

df43de65ba4187254b8b650aa7dc8d02_JaffaCakes118
Size

680KB
MD5

df43de65ba4187254b8b650aa7dc8d02
SHA1

2a80abcaa1cd8d9ee753be320b8f0ba879a36ea5
SHA256

7345bc1f7ba33d02214d2a12cbac898f68fc287bde69710c2af2ec0124872c80
SHA512

e80dcb37a2377be67b9906edd67ee5feb59f41937b0340d79f52c9c25e1b51068f24f94d8ad6d065c5dbe890e788cef87b8242d2a2137cf670383e81507784e9
SSDEEP

12288:vV99Kn6E0SwNExZA/C2iaNHgLSx7BwIaKmGzl917/gI1gN2mX6JiHhhX:vV3KMSCniaNWqt/9l91UQgAZAhR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df43de65ba4187254b8b650aa7dc8d02_JaffaCakes118

Files

df43de65ba4187254b8b650aa7dc8d02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c86b232d74210fa81ca72b0f08a40ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord581

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 632KB - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ