ff12aebb7397af29046aa807bf8e491a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff12aebb7397af29046aa807bf8e491a_JaffaCakes118
Size

32KB
MD5

ff12aebb7397af29046aa807bf8e491a
SHA1

519e6095c2d5fc2e67f8537c0c1d106d0f6e5892
SHA256

6a8be4df759d8e70706f8efd18c20072fcad88244caceb4b674b1d1acc3b268c
SHA512

ad0e7360cd860e5efc32a8f3794a3fa9ba99af2500999dcf67b9aa0369e058a66a21fc573650b04536fe0a34bd8cdec65d60eadee0b84cc88d1050dad299e286
SSDEEP

192:tUqe7ZlDO8RzzyfauU4TmNAjVI0VXvMvlZ8mnQ7Htk8:tU3lDOYyyuU0mNcVBVXiT8PHtJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff12aebb7397af29046aa807bf8e491a_JaffaCakes118

Files

ff12aebb7397af29046aa807bf8e491a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6d01ad6970760cf7c73ec72b108df14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord537
ord570
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ