5e2654956c96e63d5296a093cbf04b5a_JaffaCakes118 | Triage

Sharing

General

Target

5e2654956c96e63d5296a093cbf04b5a_JaffaCakes118
Size

1.4MB
MD5

5e2654956c96e63d5296a093cbf04b5a
SHA1

a65b92f5e0d75cffd416f38f1172612a457c5241
SHA256

89078e431c06bd7f5f8088cdbdd4ae8f2eb20bb3559847c6139ee3ae90aac695
SHA512

1b6ebcd2b5d2d081a0c11e8551a80438c568add7ac2a83e8543eee603e08989673b5faebb7cd6f649c233b16a86728c623a811d9f05d445d75f2b7698b5f2b86
SSDEEP

24576:Az8013WqtfjuUXsl4Bg+OM4viEKFD1J2KRM9bAvqVVC4SVPWsl4Bg+OM4vi:3Mtfj/u4BeMUOFS2M90vqVVK94BeMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e2654956c96e63d5296a093cbf04b5a_JaffaCakes118

Files

5e2654956c96e63d5296a093cbf04b5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36b327a184ab60d0f7f091e95e0c2139

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord595
ord303
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ProcCallEngine
ord644
ord537
ord645
ord573
ord681
ord100
ord616
ord617
ord619
ord650

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ