1bee13677ad4fa7caef6a93c15e0e121_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bee13677ad4fa7caef6a93c15e0e121_JaffaCakes118
Size

48KB
MD5

1bee13677ad4fa7caef6a93c15e0e121
SHA1

446133fc96b7f16161a59b7aeca143c552777b5b
SHA256

0e10a2cc8a0dc6c1b090a26099d80d36461fa5230973e5d3154e2ab4d0b6b7db
SHA512

1f159146d28dafd9d828c5a1d220095aeb94422747765c4c55aa30c99d23bbda3d9874dfccecd7169f8ee348a85236d0eda5340ad52fcc645569aeaabfaceb7e
SSDEEP

768:EDGoB7fGUyW8zwp9kcx1yD8sDPjhf1rPf1TH6rLx7J7ZS:AfhyWmwpvx1yNFf1r1c7ZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bee13677ad4fa7caef6a93c15e0e121_JaffaCakes118

Files

1bee13677ad4fa7caef6a93c15e0e121_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95ae95651c8fa759af987e402d25e0e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord617
ord619
ord581

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ