1bab1fd210b1246339fe512ce619b9df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bab1fd210b1246339fe512ce619b9df_JaffaCakes118
Size

388KB
MD5

1bab1fd210b1246339fe512ce619b9df
SHA1

a53c9f8b5a0d11a8bc94f44bd08ede7c89409338
SHA256

907404eafc57880e9a523e3eed5ea46531fbb18acd759836ba2879ecc61f1d01
SHA512

7277afc3009068dca4d48b34bc0da5184982be3325cb714d9af0a8752f0f0c81a5850b5a6fa39db2e1c1122a5cf521f84576fd6085dfa0828ebbeaeee4d93699
SSDEEP

12288:vjW/RUsOpAENfv03wF8qgxqm6D3NrkNTh/d:LW/fOptfv0AF+qmGrC/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bab1fd210b1246339fe512ce619b9df_JaffaCakes118

Files

1bab1fd210b1246339fe512ce619b9df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23e11e0cb5f7de43af3c6b3c3edc7f46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord519
ord669
ord595
ord598
ord709
ord631
ord525
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord530
ord531
ord532
ord533
ProcCallEngine
ord536
ord537
ord645
ord648
ord681
ord685
ord100
ord579
ord616
ord617
ord618

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ