5aa2d37f12147625b61041146ce3d7c3_JaffaCakes118 | Triage

Sharing

General

Target

5aa2d37f12147625b61041146ce3d7c3_JaffaCakes118
Size

272KB
MD5

5aa2d37f12147625b61041146ce3d7c3
SHA1

7fdf207333a2a38f5178ef515f353a7576f1b88f
SHA256

6fb460f9e91351e999c6c8ca8fbc8e70e055ae606f3bc2bf39410f41c1cdabbb
SHA512

d09cf227e62be92ccb111a3410fa12b78a281a0d21403d5f54ef28779bc5fcc72462d9545207ebbecd5f1e16c1451b6c8f62f039d3a6956f0341179a2aa16a12
SSDEEP

1536:VkKCMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wkEkotu:i+X0e1FB/DpKjCLHAkEL2OUsLL5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa2d37f12147625b61041146ce3d7c3_JaffaCakes118

Files

5aa2d37f12147625b61041146ce3d7c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad1d7ba64755656cf931b2cee4c1b22a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord681
ord100
ord581

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ