5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118 | Triage

Sharing

General

Target

5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118
Size

752KB
MD5

5e0aafdd4d056ef8889fd8d83357708d
SHA1

5d30e99d2d557bb947bf4b1677ba70745741a491
SHA256

05c24fe54f55d1d54d56908d5e9f55672d1eda52cda1e1fff73ca9e2cb83dfe2
SHA512

58ebd0918521a1e2262e69cd1ccb46c50d908a814e18985bb518f61e88891cbbf074fb449dd4e792efcaa1183b451c4bdf35d3d713593bd14b0ac9803e03a153
SSDEEP

6144:CRF072zPGT8d11Zty2rFWaBFqv9L3smdyBZW/wd7LjD3YEH+5FvH:G1ntt7qvLdS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118

Files

5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55f7b5f3f800c674e97bed71cca89fe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord519
ord593
ord594
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord527
ord529
ord561
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord648
ord572
ord573
ord681
ord576
ord685
ord100
ord610
ord612
ord613
ord616
ord617
ord618
ord619
ord543
ord544
ord546
ord581

Sections

.text
Size: 744KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ