5adc7693af134aaf83bd4e397f003432_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5adc7693af134aaf83bd4e397f003432_JaffaCakes118
Size

12KB
MD5

5adc7693af134aaf83bd4e397f003432
SHA1

a35384fca199438fd202f03c8ea68846787b462a
SHA256

1456c83a1bd77a6cd5f0e7acbbcac18ad822b236e7348a23703bd369a5ae72bd
SHA512

54ff5d97de8c1e1423306dfe1af9f2f3fdc313aac53fbc270db32c7a8d0201f407134830c37a48002cc46ff5d636fae3b2db9acabf39049effaf5ae541c51c5d
SSDEEP

96:Oe563uBzRGmq1CIPY8pBNBGMXcWXClTl6t1PNjPI2:38Rmq1DbBXGgUpO3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5adc7693af134aaf83bd4e397f003432_JaffaCakes118

Files

5adc7693af134aaf83bd4e397f003432_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc10b4758b50774de0ba6b82a56afc8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord537
ord570
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ