f067957892a004ac43bac8ce58fbc191_JaffaCakes118 | Triage

Sharing

General

Target

f067957892a004ac43bac8ce58fbc191_JaffaCakes118
Size

176KB
MD5

f067957892a004ac43bac8ce58fbc191
SHA1

77a0e05287c5f9ef86437152fa9fd47065f9e8df
SHA256

19835b39c3cadade0a7b146a44bbe63c073c678844e33755a24beff178c888bd
SHA512

d07489ea0033dc1d3cd301cb0797d15059dd89aff5bca2ff9042f4c6e996c067e4815f8e1e442e4bfff2b68e1cf955e925e1e403e0512539c3f629819124acda
SSDEEP

3072:BUOKdxkfAkZUaqljS6lg8DL08c8p4gv6Bf:BUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f067957892a004ac43bac8ce58fbc191_JaffaCakes118

Files

f067957892a004ac43bac8ce58fbc191_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0991eee6391d972577953b6214a24ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord681
ord100

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ