12d54bd74caf14c6cb89c331aeeea670_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12d54bd74caf14c6cb89c331aeeea670_JaffaCakes118
Size

85KB
MD5

12d54bd74caf14c6cb89c331aeeea670
SHA1

9259a7311c2b56eba6d8d71bac6b7ef1d08eeb6c
SHA256

27adbeb662fae5c5cf45f26764f1aa6a4cb1e6c66fedd26bb81968ff3617c4f2
SHA512

848f0657587255bf9fe807c74e419981ffa54db724308df1561233bf94305559a284f18882f6aea01e03a64ba172502c5f6c37275b213d596ad0b3136ebeadf0
SSDEEP

1536:v+74Sz0MVvnvOCbLquGaem6OR6f7LjgmQ4R2d:c7dnJbO4e6R6f7HVcd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12d54bd74caf14c6cb89c331aeeea670_JaffaCakes118

Files

12d54bd74caf14c6cb89c331aeeea670_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d6db7d759d00fc30c40b82a76fa6104

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord552
ord556
ord522
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord541

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ