06ce03b08dd4952d4ba30652e8792c51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06ce03b08dd4952d4ba30652e8792c51_JaffaCakes118
Size

60KB
MD5

06ce03b08dd4952d4ba30652e8792c51
SHA1

6a9afbcc48c0fe89ff54d4ead2201bb86a4e9cc2
SHA256

495020806e5505b1a4e7db1b0c5d2fd5b8e32b817ce4e48f735d083bcd19ac46
SHA512

679ba4c8ce3504d54945f5d738298b8093e3045445f6afddf57e4dccf66cc125b35c2fcf03116d9e91845f0d39970b01f01a0768299c429b57d4e821373145af
SSDEEP

768:iUfhdxO3uedExqz7NHJ+KX9cL7THtpWcbE:iUE7VzxHMKX9cL7ZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ce03b08dd4952d4ba30652e8792c51_JaffaCakes118

Files

06ce03b08dd4952d4ba30652e8792c51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE