6a6171d058c31d6b940a601e98e2b6bb_JaffaCakes118 | Triage

Sharing

General

Target

6a6171d058c31d6b940a601e98e2b6bb_JaffaCakes118
Size

120KB
MD5

6a6171d058c31d6b940a601e98e2b6bb
SHA1

7cfa5cb756d970709e4266ef17a548bea41d5a1c
SHA256

7dab7874e786405628fb032e5a2bb488c9ada6206c8af0c9c6c625584b22f523
SHA512

713e4d0bc67016ed26c55ffa104376bcc4d00dedd7a3a1cb013831a2117cf6f9e677392c482e0ec8b474ab39cbf5837a49cd3d205441ae8be654b3ee40aabfc5
SSDEEP

1536:D2uN491bIWinffR0tvSXk/EDhSHxuJvt96aD/nHOE90AooN/n48FCqu3iPAg:D61iffR0t0AHxWauvKTe/n4aCqK9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6a6171d058c31d6b940a601e98e2b6bb_JaffaCakes118

Files

6a6171d058c31d6b940a601e98e2b6bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

113a17916297563601e5b5d03032991b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60.dll .

MethCallEngine
ord665
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ord644
ord537
ord570
ord648
ord681
ord685
ord100

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ