f98418faf71e1bf1ccf72cf9e2000d42_JaffaCakes118 | Triage

Sharing

General

Target

f98418faf71e1bf1ccf72cf9e2000d42_JaffaCakes118
Size

81KB
MD5

f98418faf71e1bf1ccf72cf9e2000d42
SHA1

253573f5293337934d786846a87f197c6afbfdf3
SHA256

149f8a68c4c6c16d930d624276d0816f9654edf25a8601b07027f0c58a0dc7f6
SHA512

dbf97ea508562888f9bc243992b5b46dd75c6fd4a55616331dc112978dc6e069541eeaff444a8d6f7cb1dafee6e872f0ee71d56f9a112d2627d3bb85e9bef138
SSDEEP

1536:tgrpQajQWh2Lwl93jE1RHzpdy1X/z3wpkMJlhGzZpslOTiZ3ALep:yljQMV93jmTeX/z33MJrGzT9S3ALC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f98418faf71e1bf1ccf72cf9e2000d42_JaffaCakes118

Files

f98418faf71e1bf1ccf72cf9e2000d42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.
Size: 272.0MB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ