f5bbab6a675914203f76c19f3bc55090_JaffaCakes118 | Triage

Sharing

General

Target

f5bbab6a675914203f76c19f3bc55090_JaffaCakes118
Size

24KB
MD5

f5bbab6a675914203f76c19f3bc55090
SHA1

d66cf809bb70e0f9a05bdd328487797acff1a916
SHA256

32daaf5ff02fea4c5d224c90d71f2899ed3a3c84aff7c9354fc222397809b2eb
SHA512

5a067037f56ca12e76d87391886c4b0fcb94b328b74eba70c04b3d236aa7b0e6a7d4dd8e1b2e038e4fd5b7a1f06fd16634fff91d91f64ee36e1cbd644d790358
SSDEEP

192:CpqG+GCWyUuWEBKfvH7D9M6Lyo6rkmRnTiT5n9MtDyFCivCvl5x5rBxEh:CpkpjV2v7CnRmd9mDyFpvCpzxEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5bbab6a675914203f76c19f3bc55090_JaffaCakes118

Files

f5bbab6a675914203f76c19f3bc55090_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32acf42d4570f7889ea713ddee025660

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ