06004b4d24f90f4d61cea43c95bbb9d6_JaffaCakes118 | Triage

Sharing

General

Target

06004b4d24f90f4d61cea43c95bbb9d6_JaffaCakes118
Size

24KB
MD5

06004b4d24f90f4d61cea43c95bbb9d6
SHA1

56a28c1fa28e51645913a7fc7b306b9d7a0d1b11
SHA256

b34b642adcffdb4dc31a7fcd7b22fb458ef4945156390d0104a1b9a529723913
SHA512

4f4486ee0dc046420953a288b6237d7f8cf321d6fec6bdc23361b24382ec044e7069fb2536668edcd17e92cf21f51871749832a79955906f1725d14aaa0d0976
SSDEEP

192:pyK+7ZDu+5ELmqGLIuNneyM/5pmC39hNryxwu9bNyn1CqdGMuTnzqxw:E5ZrOKq+Na3fqhqdGMuzOxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06004b4d24f90f4d61cea43c95bbb9d6_JaffaCakes118

Files

06004b4d24f90f4d61cea43c95bbb9d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2977c13f8f318df2a1b5f73d0b4279a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord552
ord306
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord318
ord717
ProcCallEngine
ord644
ord573
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ