c6594d13734462e327a75eb803c1e583_JaffaCakes118 | Triage

Sharing

General

Target

c6594d13734462e327a75eb803c1e583_JaffaCakes118
Size

1.4MB
MD5

c6594d13734462e327a75eb803c1e583
SHA1

a37788d357fe854b4862338e43f2468e80ca216e
SHA256

6b67f7c1bfe6dc5060a40c534ed1aaf0c4a39690ef28347b004c777bb5f48263
SHA512

5060fc6a29baa20964fc9460a6d2a3b89de430150ec3cbf088d9a253df99f9a131f20cea7652fe2a1d1430a29ead679e65f4b7446e3633d4e244dec04c0f0316
SSDEEP

24576:B+qCQdxc25pNzyLXxNDumIbcEsWXy9d0FAv1s:zCQdS25Lyr1uc5WC9d0FAS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6594d13734462e327a75eb803c1e583_JaffaCakes118

Files

c6594d13734462e327a75eb803c1e583_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e68630c993cf7a39515cda911979cc40

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord585
ord586
ord698
MethCallEngine
ord516
ord518
ord519
ord183
ord629
ord552
ord553
ord660
ord667
ord593
ord595
ord702
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord561
DllFunctionCall
ord563
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord717
ord186
ord535
ord644
ord570
ord648
ord575
ord100
ord579
ord610
ord612
ord616
ord618
ord619
ord542
ord545
ord547
ord548
ord581

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ