06c35ad4d65eede48b33b8365920f442_JaffaCakes118 | Triage

Sharing

General

Target

06c35ad4d65eede48b33b8365920f442_JaffaCakes118
Size

20KB
MD5

06c35ad4d65eede48b33b8365920f442
SHA1

a7cc22d3826ec4056240b122568ce39077317d8b
SHA256

c6ce608cf184a1c1367960c1cfee60f3ec01d97c3f302c054a9e16445416e3fb
SHA512

f02b0e7baa1022240eb5c98524b3753f286eff9b811d7e5b848e42a40f456d5061ec94076239c194b2a5fb2a7875dd6bf4186d2acc2bc917791f2af10f9e3e48
SSDEEP

192:rIR+EpRCj6KKH0UgaAfgHczm+R7wmH6WBGKhWqBQk+wjj0+:rIPAj48aAtta25hsbwjj0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06c35ad4d65eede48b33b8365920f442_JaffaCakes118

Files

06c35ad4d65eede48b33b8365920f442_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b55eeab8b8d4a24f030d11def19a8380

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord584
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord609
ord717
ProcCallEngine
ord644
ord100
ord689
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ