06e1766c8e9b8e6b0bd70cb31b472660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06e1766c8e9b8e6b0bd70cb31b472660_JaffaCakes118
Size

34KB
MD5

06e1766c8e9b8e6b0bd70cb31b472660
SHA1

39b577dcfcee47e31b6e8001b4c902495237a726
SHA256

1d6cbebf2b9e82ceb9ddd651d4598b2effb8d8425f9adb30e73e377143baa97f
SHA512

9faa3bdc608f39b95bce4c197f9455e5a4f80d8f654f0968cdaaa72e1c94e926f6e4f35914250574252b80efc7bf35ea14fe43e80d079076a369fc8a8bcef77f
SSDEEP

768:YoolDw+rLOagC0peUJjXYfxQqPnhYqicAp/m:TMDfQsUJjXYQ/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06e1766c8e9b8e6b0bd70cb31b472660_JaffaCakes118

Files

06e1766c8e9b8e6b0bd70cb31b472660_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7be3f37c52e1aaa1b73dd38e185bb183

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord695
ord589
MethCallEngine
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord542

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ