ff376fa4e6d4b4a2d722905cd8b900a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff376fa4e6d4b4a2d722905cd8b900a1_JaffaCakes118
Size

124KB
MD5

ff376fa4e6d4b4a2d722905cd8b900a1
SHA1

a955095b804fe8f644d10fdde9522d536db2af36
SHA256

993d3668d1d9f2f2637b105b12a93c4eb548bc3c45bbacb461214a7874374f92
SHA512

b7ab169c67e3b93ccd8e7c124ce2d31fdb706898345ac60ae35b6e02ae58c262da830532d2f835916d136aba298ac1b8e675aca0a1fbdbf764f2697bd8230d51
SSDEEP

1536:luZMFFqrWaYkiQixA+alh98t8aF9USvXjykwo7JaS1:UZMFFqrWejH8tq8TwQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff376fa4e6d4b4a2d722905cd8b900a1_JaffaCakes118

Files

ff376fa4e6d4b4a2d722905cd8b900a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

014aef72843077278a3b972be07b3c5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord595
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ