f70484b8346bf3a9db5763f289fb5881_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f70484b8346bf3a9db5763f289fb5881_JaffaCakes118
Size

108KB
MD5

f70484b8346bf3a9db5763f289fb5881
SHA1

455c0e77cc8e938d3850eea2aaeb522cbaf266c4
SHA256

2fdc87cfe7abf54b0321e880eeab12af9c763c001bfdea62969134d6b5850d4d
SHA512

ee3f27d2046b22498ad5a5f04caecce2c8ad96813ce9a71e785a706205ce7276d1cf6b21431eeaf3ce973b64e0c2595c715370c34e65c6875f5f78b08b38df8d
SSDEEP

1536:HCk8dnislrMvSWd597rPIikfD5xrSn8VQqV90VX6ESn7a152KuJ0CACkAHcgLEHv:HCk8FplrMvxdPnkfXW8miNE5/uJ0ddv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f70484b8346bf3a9db5763f289fb5881_JaffaCakes118

Files

f70484b8346bf3a9db5763f289fb5881_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d11509e7c779aef69c1c046f0e265ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ