f63e0cfc1d1c32539fe137d32fda05e3_JaffaCakes118 | Triage

Sharing

General

Target

f63e0cfc1d1c32539fe137d32fda05e3_JaffaCakes118
Size

28KB
MD5

f63e0cfc1d1c32539fe137d32fda05e3
SHA1

a2759c9b0d75f63a9e365b32143b6602caa0f653
SHA256

cf8b9b1e95d112df80ff219bf0a883d958d9f13198fd5a596283f53eb5876a7b
SHA512

9220f90b8fa69d1c37686ada45e2a7ca6d3dea22f0092330c51e787eafd6f4a948197ae6fe2b61ceda9ae84f5f710b26f315a79f3043b17a5f060152c7a9bc92
SSDEEP

384:Sa3I1EvZL4XQ8neOungqER7DnlaDLbQ6:B3G4ZL4XQ8ningqwlaDo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f63e0cfc1d1c32539fe137d32fda05e3_JaffaCakes118

Files

f63e0cfc1d1c32539fe137d32fda05e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80d8cef188316d10e645ecc1725fd708

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord519
ord595
ord598
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ