03f14bbaa5c8f52d354c1d5c86be8005_JaffaCakes118 | Triage

Sharing

General

Target

03f14bbaa5c8f52d354c1d5c86be8005_JaffaCakes118
Size

57KB
MD5

03f14bbaa5c8f52d354c1d5c86be8005
SHA1

d5df9129e6b47aba1f6209c7881887cf90767f78
SHA256

34632b5cfd64edcc3d3e9f0cfbde943f697772c56acd1df95c1f34a759000d89
SHA512

498aa3ce4fe06393178da91dd7fd0d2b024d26368d4e2d6cdeefca7ca514a75457bf5054f116a475344226631002003917f2051be425657416a3cb178542b94f
SSDEEP

768:EWTkFFHggtmazmkAEBSLvL5nC6mdflgkHbngUBEwaZ9i:9kFJggbSESYmkHbgUBE/Z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03f14bbaa5c8f52d354c1d5c86be8005_JaffaCakes118

Files

03f14bbaa5c8f52d354c1d5c86be8005_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3697944a64a62226d23da3306d9467c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

thumbs .db

MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE