27b5604f90f6b56beb4264aa00f45f46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27b5604f90f6b56beb4264aa00f45f46_JaffaCakes118
Size

172KB
MD5

27b5604f90f6b56beb4264aa00f45f46
SHA1

96468df1277fb656a74f303f0f4c33d8c0471971
SHA256

0dd6017fb5dada0145cc93c63b96be35ac83c39bb3aeecd7ae0097f3b62aa588
SHA512

a37a4c41d2d5d9187fa9c5a5d268a3910dfddbbfdb11f009220f09698a599481c5160806bd8be8648fb1861683e15f7944d49ee1debd4560c6fbbe121dae7ae2
SSDEEP

3072:bzsh2AAvpOlCyuANkR7xrznI2oLIdl0gGVNJW9RLe:be2A2uCZ4KhIDKlBe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27b5604f90f6b56beb4264aa00f45f46_JaffaCakes118

Files

27b5604f90f6b56beb4264aa00f45f46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

942abe0283eea0388ae00a58e1108761

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord536
ord645
ord681
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kuggtbb
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE