f1bbed3ed88c7b43de6e31aefecc50bc_JaffaCakes118 | Triage

Sharing

General

Target

f1bbed3ed88c7b43de6e31aefecc50bc_JaffaCakes118
Size

178KB
MD5

f1bbed3ed88c7b43de6e31aefecc50bc
SHA1

81f648025e25a4fb54b3b7786317265a288e5025
SHA256

a846d606b6249ed7106979c61dc7a5fc2d266f2a4b20d6642e2d5416d163acd3
SHA512

61963cf07090e0e3586bb55b25c2e203713bed3248e7a26733f3a1e25cd968ed004b0a1af3cad0ba6fe631a0327037728f4e1c99a85389e54ebd5271483ca906
SSDEEP

3072:NhRfk4FJAM0T5aD/a86ON+h8RiNDVHjTxAiu3sbhQL4/br/FVG94aI8khB:NhRsKAMm5aD/agRqxDUiQkfNVGnkhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1bbed3ed88c7b43de6e31aefecc50bc_JaffaCakes118

Files

f1bbed3ed88c7b43de6e31aefecc50bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1e7c6b0357ccb7b8dc9cdd62e99c231

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord645
ord570
ord681
ord100
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ