1468af4c67bedc25963f301eb34d95c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1468af4c67bedc25963f301eb34d95c1_JaffaCakes118
Size

172KB
MD5

1468af4c67bedc25963f301eb34d95c1
SHA1

62fa591cf871a1331b117edcd349ccb4b3dd75f3
SHA256

9e7f5bcb2ddbb3a4352d54caaca5d6a2af12197043433056dc3b634c63538e43
SHA512

eaceaf9a47c083c4735cb0288e4e06200e055a8211b8911dccad9af990d808762bb75dbc19e28cc1d5c37226d6cf3f95c45fc966d9b1c109beb268aafe7d46d0
SSDEEP

1536:tgQ5555yy2HXrVOTYe6QMtuAXq+8ts2EzAxyQoOGJr0wqHlh/jnm:eLxXOYlha+8tAkhqAv/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1468af4c67bedc25963f301eb34d95c1_JaffaCakes118

Files

1468af4c67bedc25963f301eb34d95c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90d0d2cd65dd712745a5a218a246d6f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord588
MethCallEngine
ord665
ord595
ord303
ord598
ord309
ord523
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ProcCallEngine
ord644
ord537
ord645
ord681
ord578
ord685
ord100
ord579
ord616
ord617
ord618
ord619
ord580
ord581

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ