27e3aeb4d6ef29cd6b72417a4dd90aa6_JaffaCakes118 | Triage

Sharing

General

Target

27e3aeb4d6ef29cd6b72417a4dd90aa6_JaffaCakes118
Size

1.7MB
MD5

27e3aeb4d6ef29cd6b72417a4dd90aa6
SHA1

39dbc55727ddb7058f2cfdade29e22b6615ccc96
SHA256

5bfbbcf06a5514a823381f39e89f1936ce08212460983960f08f52160f1f114e
SHA512

df2b268d7697418f0ee399521b70bf649950710717405e05044616b536e49a62a42072f0984c3743e6a735da49133a06c4eee532074e000d4e21d38ecb764bfe
SSDEEP

49152:yqKB68NA8g4P68ZAgKDg+PAg68eKQglG:QBXxWDLXQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e3aeb4d6ef29cd6b72417a4dd90aa6_JaffaCakes118

Files

27e3aeb4d6ef29cd6b72417a4dd90aa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38a08c6eb298b8238ee28086ff7b703e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord516
ord518
ord519
ord662
ord593
ord300
ord594
ord595
ord596
ord598
ord599
ord306
ord520
ord631
ord525
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord571
ord572
ord681
ord576
ord685
ord100
ord616
ord618
ord542
ord545
ord546

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ