0613d4fe766d8415c9e29bc84ecdeb35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0613d4fe766d8415c9e29bc84ecdeb35_JaffaCakes118
Size

264KB
MD5

0613d4fe766d8415c9e29bc84ecdeb35
SHA1

75de683b416a36b1b89e37f5d4c346bab7ec0581
SHA256

98abe32a73020af2f118e6c33bd301d8a354e29d19cae3ee07450e39bb90792b
SHA512

59d80a0d0fc5f46021c1f579e940e85f38cfdebce318ad47a72bc6bd4c327a0786f9ee463d4045f410080f4d21baa29fedc3f00dc180b297cef5ad428aafdb55
SSDEEP

3072:S0rgIzkCtQ36H8h3AKFeBumUAe/0jIHxow9+aJe1mgawzxsBub86YPw:STIICQ308VpFeBKd/qTV5nYPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0613d4fe766d8415c9e29bc84ecdeb35_JaffaCakes118

Files

0613d4fe766d8415c9e29bc84ecdeb35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

358f51be138a913eb813aee5d2a9244a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord693
ord187
ord588
ord696
ord698
MethCallEngine
ord516
ord518
ord519
ord593
ord594
ord595
ord598
ord306
ord520
ord307
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord318
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord647
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord579
ord613
ord616
ord617
ord618
ord619
ord650
ord581

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ