416246913d27abd161852ac32edca494_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

416246913d27abd161852ac32edca494_JaffaCakes118
Size

68KB
MD5

416246913d27abd161852ac32edca494
SHA1

f11e22b595b5e6c50874363767ca789b51832d2a
SHA256

e0fb4e8da973c69a64f984c4af678464ce3dcf227be60b04a59ded2e52886118
SHA512

812a5e1aff66db1c5cd214ca2e7ae453c1f7bcc209c8e5c4ae7cd205b1b3d68d70641f1a6928747ed748ae95694abd2a0268bdb38dfbaec13bd8b64f364e847b
SSDEEP

768:ncnliTdnqrGAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:cnIxn9AcqOK3qowgnt1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416246913d27abd161852ac32edca494_JaffaCakes118

Files

416246913d27abd161852ac32edca494_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7005d5e374c770dd6e3b206fd4b8803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ