059b0dec702a037c0920699a92d4255f_JaffaCakes118 | Triage

Sharing

General

Target

059b0dec702a037c0920699a92d4255f_JaffaCakes118
Size

200KB
MD5

059b0dec702a037c0920699a92d4255f
SHA1

7a4c3a4e735ae957bd20270fe953e9c15c212711
SHA256

dadcdada8137b76ef6c4a6a5f072158b27f1ad5809bb93c77018170958b7fb56
SHA512

2cbc5787e62f0e009cfa3ac7d8d2bc95f3384674d3c2427cbc9dee1d7442fb4a56cb0f77555858d486cab5060a1ae01890c50646b07bd2fa6d92ec397463c168
SSDEEP

3072:fKloQSrkKgRENEI5apGTwQqVMTW0hiJD2fNsHsSJ1LJfTAuq9s:Wv1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
059b0dec702a037c0920699a92d4255f_JaffaCakes118

Files

059b0dec702a037c0920699a92d4255f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7cbb02f57c08c2c5dc40611a83574ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ