5de5f358718a6525a80fe0f065dd7b97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5de5f358718a6525a80fe0f065dd7b97_JaffaCakes118
Size

764KB
MD5

5de5f358718a6525a80fe0f065dd7b97
SHA1

3496f4a840852c5134c12c110838d7bc5356ac7e
SHA256

08f4303d633f82763e33e73d9c18f8c70d2ee0cf71e02ef3b4e7c5b6df84e14c
SHA512

b0da583b9eb6b23c5b0f132502372b2324c14f82e4469531e794eb483dd21eed3c5f9d1df6fa0537e5920113db53ca3421b423f4fc6e9c61dbb98c7e20d0fb20
SSDEEP

3072:GNVUtyFBz/1eWUUXK5SmMnVUSU0BpEGVXC:GNZ1eW+G6SU6Kj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5de5f358718a6525a80fe0f065dd7b97_JaffaCakes118

Files

5de5f358718a6525a80fe0f065dd7b97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ce216327d13f46ded8d41108088fa75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord597
ord599
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ