1bc5d0634b0bdba8244cd7943c02254c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bc5d0634b0bdba8244cd7943c02254c_JaffaCakes118
Size

165KB
MD5

1bc5d0634b0bdba8244cd7943c02254c
SHA1

3bef5705c607a1438c66930e317ef38b32842fa3
SHA256

b99288ee64dbbe237e87b17132bbb4d0cdc3b009d7e9711cbfa459373894770c
SHA512

4fe41ac2c6151e9b91782f5b7864942253f66852119f7eaefed718eed3afc7681029dd45765cd1c0ea622e4f1901728f60383f69286945447f1c272ff7dafb89
SSDEEP

3072:UOiJuIIjGyS55ejwPdIuG8UvahsdcYX3UI2EuJ3im/ZCdady+RlTp/VYq63+sU:U5Ju9GbIwPBUyhsdEI2++M+RlTHYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc5d0634b0bdba8244cd7943c02254c_JaffaCakes118

Files

1bc5d0634b0bdba8244cd7943c02254c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8bc52598eb83259859485f4dcab173df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord518
ord595
ord598
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord647
ord570
ord576
ord685
ord100
ord689
ord612
ord581

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ