27bd37d78ff8e705f1a8ec3d5a50c523_JaffaCakes118 | Triage

Sharing

General

Target

27bd37d78ff8e705f1a8ec3d5a50c523_JaffaCakes118
Size

36KB
MD5

27bd37d78ff8e705f1a8ec3d5a50c523
SHA1

59b4e3aa2e513d424ff3bcbbb9ed3a3da79f6c13
SHA256

07bb967d125aac6618a00b830b9cdab012df62c19aea3fa8c7d805452a948ba3
SHA512

7343bba07e3a8aef0ee76c1bc6cbe602a13ad214122bb6102a0c8514b01deaf908f67fed682241826374c7cd72b38fe465d7c750d4c3ac90558432c87689a137
SSDEEP

384:g52HOo97fkDASlJc5IB1dBx2SGct9JcInp5wyWq2BzSQEt:a2HOefk8NvSGctDL2Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27bd37d78ff8e705f1a8ec3d5a50c523_JaffaCakes118

Files

27bd37d78ff8e705f1a8ec3d5a50c523_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb9ab72ab5a1138ce053318c41dfd3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord660
ord598
ord306
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ord318
ProcCallEngine
ord644
ord570
ord648
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ