f286ef958f1ab68d57a4fd1fe3db932e_JaffaCakes118 | Triage

Sharing

General

Target

f286ef958f1ab68d57a4fd1fe3db932e_JaffaCakes118
Size

27KB
MD5

f286ef958f1ab68d57a4fd1fe3db932e
SHA1

f22a938563c5d0f076a62a6afce5ce6c7ec704c9
SHA256

b962ca83c779576d6aeea041f0d450b2f0e8b858ee2e192166f109bf5fdb8e39
SHA512

691c82e5a4fbc65dcacf849513aa1bbfa40ebb10ace5c4e017c847f43df4fff0d6f4696966f24cfdbd7752fd9053a4e224bb3ef253326377b20e39ec35b72593
SSDEEP

384:5+VCETo+n3RWr6lYv/szKNflRc2aAZlqfuG92oLNDfim:58CETo+n3Rpmo0NR1aAZNfoLlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f286ef958f1ab68d57a4fd1fe3db932e_JaffaCakes118

Files

f286ef958f1ab68d57a4fd1fe3db932e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

560ada3e895ae3ac1685db5571ca73b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ