JaffaCakes118_efd0b7be6a79ea322ca33bcd6b6a16a8 | Triage

Sharing

General

Target

JaffaCakes118_efd0b7be6a79ea322ca33bcd6b6a16a8
Size

600KB
MD5

efd0b7be6a79ea322ca33bcd6b6a16a8
SHA1

73dada257b99613d2b74495ba7babd8a74f7adc1
SHA256

385270587c4693eaafbee4a85c8cea648cc737146b331d07f5be213188296355
SHA512

a9004fb2b17126c81cbe1b47e58f03115673f702219daebdfe804ad367fdb34fa21f8b58d9ff843faa5641d78c5781f86276e07be7714334c9deee0f0c19c934
SSDEEP

6144:bet53wzrM3sYpc/uvoP4kg9mX4h5u/aA1l3WQwzrM3sYpcQJwe:bG9wZ0c/u59UtWQwZ0ckw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_efd0b7be6a79ea322ca33bcd6b6a16a8

Files

JaffaCakes118_efd0b7be6a79ea322ca33bcd6b6a16a8
.exe windows:4 windows x86 arch:x86

d46ab258a4cbe7459621da109c2b359d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord595
ord303
ord598
ord309
ord709
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord681
ord100
ord616
ord581

Sections

.text
Size: 480KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ