f6ef1a6136f4020eea6211db56904d50_JaffaCakes118 | Triage

Sharing

General

Target

f6ef1a6136f4020eea6211db56904d50_JaffaCakes118
Size

40KB
MD5

f6ef1a6136f4020eea6211db56904d50
SHA1

7ebd6339ea304e1dbe96117250d11758e2286382
SHA256

2e22c6bd477f822942d1900435f0e879a1f7e41b6e8f118c8df2e2119520de14
SHA512

73da1fefaec327bc57381d0ae0be59c062817a653ca7a4b9b916f0a4b4f88e22dadc072d3ceef0fd22a5c431d7a4ee19a27891fbc6c3e453a350949e043f6ca3
SSDEEP

768:UsQvcH/JfZ8bCOXOxXxL7X0f877Z84EFHjy:UsQ0HhhnJu87V8xjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6ef1a6136f4020eea6211db56904d50_JaffaCakes118

Files

f6ef1a6136f4020eea6211db56904d50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13ab068ee652240bb2e1f5d5b1bd7f87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord588
MethCallEngine
ord517
ord518
ord628
ord662
ord595
EVENT_SINK_AddRef
ord561
ord672
ord676
EVENT_SINK_Release
ord679
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord645
ord680
ord685
ord100
ord610
ord612
ord547
ord580

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ