016e437a5246f4d2f82e7cfbff470be3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

016e437a5246f4d2f82e7cfbff470be3_JaffaCakes118
Size

98KB
MD5

016e437a5246f4d2f82e7cfbff470be3
SHA1

25d16060a869070987d0e3cb816815485ad4eee6
SHA256

eb189a014d1b80e59289099e0b36f1d03d538e5c6bb39bc108a7c11775760470
SHA512

2d09f7180fafa911637fb07d752f1be9791f2d5db2d9ac632062a63acbe144606b9ecd6c2e75b17c909bb9d3d57549a75050f7767505490a559099c90744dcdc
SSDEEP

1536:0k1yY3NnDpp2KxPDq2OPSURVUquVrcAmkRwfwHHw8/3eo80eDB7IAx1liWaSKvBI:vaKxPDq2OPSUPA/RePeE38d5SVL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
016e437a5246f4d2f82e7cfbff470be3_JaffaCakes118

Files

016e437a5246f4d2f82e7cfbff470be3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

067a317521d0f93b99463b53a8ee5fe1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord598
ord631
ord525
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord536
ord644
ord537
ord645
ord570
ord648
ord572
ord573
ord681
ord685
ord100
ord618
ord581

Sections

.text
Size: 78KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 560B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ