ff990d5e71630cd04299fa361b349dbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff990d5e71630cd04299fa361b349dbb_JaffaCakes118
Size

176KB
MD5

ff990d5e71630cd04299fa361b349dbb
SHA1

60fbe79763641f1b96d7b720c4f564a548718b3d
SHA256

0fc87c1a88bc18c222ec3a8710f4ba08ff9460b985f2d4373ae1eacd3103f6b7
SHA512

81fad3318fdb14f096f5b6113d7291a05985229a8e6dfda94ff7ff37586696942f5a3c242eeb4fd643d0536c2b1091a2d9cbbe88ac464e4d29121354b8e627e1
SSDEEP

1536:VEBU8RZ865JlPRUqrO5Igkb4Ob91bWd60YXraq2rNBZNceQC6:qB3o8+qyu/b4OJ1eVYWJfoC6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff990d5e71630cd04299fa361b349dbb_JaffaCakes118

Files

ff990d5e71630cd04299fa361b349dbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ