f6c4965bed6e4a8b1c459f6bbbb82d7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c4965bed6e4a8b1c459f6bbbb82d7e_JaffaCakes118
Size

60KB
MD5

f6c4965bed6e4a8b1c459f6bbbb82d7e
SHA1

4d712c0ac87d46421bb2a0fdea5039abbf879fbe
SHA256

564b4f56923f6ff74447888e68374772d35b91d89c6d7fd65743bd90cee29f4e
SHA512

f56e81a59c44467ff16da797e13c1c8eed7d4b90ac0d1974abb5971fde82532899552cd8891ae3ae00b1b5333167d6988893ac97484d68edef95e8b1292b1f5c
SSDEEP

768:H+tAiw3CuKy7NHN1Cx0AB8l9HPYqrC9p9XX9hlJpdRFZXfqsCk8QkYREIsQNjo7:etVkHXCx0AB8l9HPe9p9XpfqsCwo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6c4965bed6e4a8b1c459f6bbbb82d7e_JaffaCakes118

Files

f6c4965bed6e4a8b1c459f6bbbb82d7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3ab776fb93e318156cb64fdf56092ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord716
ProcCallEngine
ord535
ord570
ord573
ord685
ord100
ord619
ord581

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ