f9d5f42ced4d91d0916a45ea0ba8b75d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9d5f42ced4d91d0916a45ea0ba8b75d_JaffaCakes118
Size

24KB
MD5

f9d5f42ced4d91d0916a45ea0ba8b75d
SHA1

9f39dfd8326a260d92234cce63b3935b87de6ca0
SHA256

99fe25fd42e2c5f32d019d9f94e6fa14dc1c2c8f97b4c4c55f759eefe6374fd0
SHA512

f1291218c0989ef024ceefbe6162596b8c26228b69b039ca022ec016a3ca0ba7f4c85f81fa5fc324c3ae8e28f0cd0c6eabb065b5cca2c63d4995d0ae398e2e89
SSDEEP

192:P9WY1NgLkzYD5852aHza71Ndr2J50ofdClCJS+m6nIqG:jngYdza71Ndre0KdkCg6nIqG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9d5f42ced4d91d0916a45ea0ba8b75d_JaffaCakes118

Files

f9d5f42ced4d91d0916a45ea0ba8b75d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a795911ecf6967aba39d3e25bd43af8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord660
ord598
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord570
ord100
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ