f4f584cf19731c12edd8f3d821b75be1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4f584cf19731c12edd8f3d821b75be1_JaffaCakes118
Size

300KB
MD5

f4f584cf19731c12edd8f3d821b75be1
SHA1

b6da3189e7bca62656a215abf8a0fd1b678f60be
SHA256

2d9fa824901e85e5582be40a2e33c1ac5f00df3496182d898dbef91748767f25
SHA512

559f61f4f1c693acb1720067fd746f6342afd43f1cead7a672139922b16b3fc0a82d150c87b245940de256d7965e04a1bb8590b160d8e11eb37ec2555d3feece
SSDEEP

6144:AAlUJk663Nn0sRKeX7rhx/BKG1Ty7+8JwyACJZxW6Qs+uI1:AyU66o0sNnhN3TyKowRCw6QsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4f584cf19731c12edd8f3d821b75be1_JaffaCakes118

Files

f4f584cf19731c12edd8f3d821b75be1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16f98d6af7ad7c596a2f942ae6e6f04e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ