f1ac53ca10a92fbfeef6d50293eec8e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1ac53ca10a92fbfeef6d50293eec8e5_JaffaCakes118
Size

80KB
MD5

f1ac53ca10a92fbfeef6d50293eec8e5
SHA1

31712216eaf5cf610b5c7468da0e7b6d11be8200
SHA256

1c9ac2ba8f19e2b4a63004deea972b65dd685735cbabd702ea1ed4c6f14db2f1
SHA512

edf284904a5e5768d101baf098f8ef68cbe71ec66a51216323028c9ef20663548d081b0e5b33701416a7e4bd92ca1ff008778df887c0e28c2b6551a158b63d1e
SSDEEP

1536:4fPoUleLq91+QgWcb4QBx2t1hg9G+NyG001uIZvCO3dZTT:4px1+z5FB4t1hgLEG0SVX3d1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1ac53ca10a92fbfeef6d50293eec8e5_JaffaCakes118

Files

f1ac53ca10a92fbfeef6d50293eec8e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0dbbd09146a7616fa081fdbaab88272a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord669
ord593
ord594
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord537
ord644
ord100

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ