f0602dd345cb27b2aea896da6a45594a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0602dd345cb27b2aea896da6a45594a_JaffaCakes118
Size

852KB
MD5

f0602dd345cb27b2aea896da6a45594a
SHA1

ed144d87f6c7ebccce62ab01b3c3da5318d79274
SHA256

91b769b1fc957c70fd7310d0a938cb410a09695c8e33a7bb7645731547f6aa01
SHA512

7b2c2c6da61101425a7a199e6a317eb6053c36bc6cb0c27ae9167e69b7fd27632c2852ad3bbddce0c90debe1f6c36ac165e23b911f245cc048ce9a440f03a82d
SSDEEP

6144:wItnQlJGAgdCf8rFB2W7ihFD0fGYh0nY:lPG8rFIaGFDnt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0602dd345cb27b2aea896da6a45594a_JaffaCakes118

Files

f0602dd345cb27b2aea896da6a45594a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffe4ebfd756e88648ce24e7936f20f75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord694
ord698
ord517
ord520
ord523
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord685
ord100
ord610
ord617
ord540
ord542

Sections

.text
Size: 832KB - Virtual size: 829KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ