f2f85f8a6b50a707d9fde044172a2cc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2f85f8a6b50a707d9fde044172a2cc5_JaffaCakes118
Size

1.4MB
MD5

f2f85f8a6b50a707d9fde044172a2cc5
SHA1

e08cddea159708aeaa88c4c0796f7d4aae450b59
SHA256

b5b3b3b9b9e063eba5c4be7b1ca2f984b1935ed9abe8f3ed2f4db9855f63db9b
SHA512

83535e195155d94fe1ca0066c51fd3e8a0ad68e37d59c749024d853362999cea5e71dcc8a031bba424096865eeaa79592a7dadb8b512b711c6cfac10a6aebdbd
SSDEEP

24576:lP1ryem+bJe/2hPiPP1ryem+bJe/2hPVP1ryem+bJe/2hPEP1ryem+bJe/2hPhPI:TryeJM+haFryeJM+hLryeJM+hwryeJMp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2f85f8a6b50a707d9fde044172a2cc5_JaffaCakes118

Files

f2f85f8a6b50a707d9fde044172a2cc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a57735aefbdd11a23987eeb50935f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ