f6f9dfbd6ecda7a1d9557b69b64f9027_JaffaCakes118 | Triage

Sharing

General

Target

f6f9dfbd6ecda7a1d9557b69b64f9027_JaffaCakes118
Size

480KB
MD5

f6f9dfbd6ecda7a1d9557b69b64f9027
SHA1

ddd537d7da25074543dc2e5101b61c8fc3792495
SHA256

7806a02df519631c6487b276e693f853a3ec078fd7f32c7fee9da3e63571a9e2
SHA512

b95fa883a6ce4585b9116db45f9ad559b3ed328ec3eb2b9dcd2bb7d761fa1d38dd59c95946aa03158b67ad43305b50485fad020cb9ebb56bd7af4b002d9ac30b
SSDEEP

1536:/wy9qvUhOjY1CnnnMZmbQtafER+TIlyX8JWLAdKP0BuD4ViHs5G7wN6/kxezoFSy:2zs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6f9dfbd6ecda7a1d9557b69b64f9027_JaffaCakes118

Files

f6f9dfbd6ecda7a1d9557b69b64f9027_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4662a886a43e5fbeef3dd12ed6d7b6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ