f66c2a370c670f545c7fd5544efd77b4_JaffaCakes118 | Triage

Sharing

General

Target

f66c2a370c670f545c7fd5544efd77b4_JaffaCakes118
Size

448KB
MD5

f66c2a370c670f545c7fd5544efd77b4
SHA1

224b9837343779ab86d7a27c868b39ee635d9469
SHA256

fd6be11b6de1749d6a0f81d68f6b727c15f396c43b13b701d8a3b546e5eb83b9
SHA512

5fab965ea0672d09cbafd1f2e60233075b7bb94d5bd2b39f6b9031b830f058e60fe63a61aaeca3454a4c006e6fa9787d2980567ef08ae63b552b07c94f8d6140
SSDEEP

3072:e2+g32OAREzfM0f1gHd9999v9999oDaNvkrEMdD5qAAx:e/g3SlsB0RMd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f66c2a370c670f545c7fd5544efd77b4_JaffaCakes118

Files

f66c2a370c670f545c7fd5544efd77b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc5f89e8ba84baf81b468727e088a76a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord553
ord666
ord591
ord595
ord520
ord632
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord681
ord685
ord100
ord542
ord543
ord544
ord545
ord546
ord547

Sections

.text
Size: 436KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ