101b7d4efa0735178414f7c2899cb45b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

101b7d4efa0735178414f7c2899cb45b_JaffaCakes118
Size

68KB
MD5

101b7d4efa0735178414f7c2899cb45b
SHA1

b73f24a2193d21e1472331dc58a217b63e8cfcbb
SHA256

01b936859811305feec8ca8e5319c1dcacc8a1c3853b2e90e5c280a20f4d4458
SHA512

b4300343d6f722941ef58f27b905e2c4e1645db550bb71e060769e57761635505a3c21f5debf4c4b7fd64ae9ac37a8752d48ae6df000df482da2a2cf1d53769e
SSDEEP

768:BjqMjQW6d5DNqkrijbEIH68aaQXVgf5AxNRY81VCNfLylyG3qXEoWTb4cQH1:QdVd2K0cxN68bCoyG3iEoWTb4cQH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101b7d4efa0735178414f7c2899cb45b_JaffaCakes118

Files

101b7d4efa0735178414f7c2899cb45b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4bef296f716e8717004d6f5681d2a4ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord100
ord616
ord581

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ