ffdf7c946d8c8f72313ded58819c46d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffdf7c946d8c8f72313ded58819c46d5_JaffaCakes118
Size

228KB
MD5

ffdf7c946d8c8f72313ded58819c46d5
SHA1

d70b8c47db42bc02bd69d19e516cf3a841eb6c4f
SHA256

3f74543a4b54eb275d8f459dd41c1acbfc5510f1d21e2cfad280757393736997
SHA512

5d1aae175ffc684477a123fb0378cc06b47e63a03971b216ade4513af2d54a6e15b95b00ad1cf27dd763ce51cc22e356faa572d010aca5bd68c60fb5f240faf2
SSDEEP

3072:vwGpHm4xb22BuQJdawR/Ge8EDTPA0eG2RMFAxpdmUztcHkl4HGzyrozIntc5:w4zBuaaw7pDTPAu2iqx/mkkG0ostc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffdf7c946d8c8f72313ded58819c46d5_JaffaCakes118

Files

ffdf7c946d8c8f72313ded58819c46d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9117326ae9a472c270c15b795431047

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ