0682a658d2d06bf1c220ccd6db426ac4_JaffaCakes118 | Triage

Sharing

General

Target

0682a658d2d06bf1c220ccd6db426ac4_JaffaCakes118
Size

237KB
MD5

0682a658d2d06bf1c220ccd6db426ac4
SHA1

7a622551d778aa0263d52462f3f473f5ae077cc9
SHA256

cef3d9c0baa10856b04af08fd2ac8b98c0a94fd0d4c63c9fe68904d7873b9e91
SHA512

190deab70f7328eb16fc0f5e1816bed25d97073a61fe7d70ba58ad342fe02234d9beef5b2c182a333c9f2faa4120d2da2d8724ed12b697e71290575d306aa3cc
SSDEEP

3072:KBIIo8+qyu/b4zm36KZLMwh81dICHM8AVclgR:qtqKuwW1eclgR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0682a658d2d06bf1c220ccd6db426ac4_JaffaCakes118

Files

0682a658d2d06bf1c220ccd6db426ac4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b77bfc1a25dd77ce71bdba56af46b52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord518
ord628
ord665
ord591
ord595
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord685
ord100
ord616

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ