5b6ebf339041c451b185143ebc5803c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b6ebf339041c451b185143ebc5803c7_JaffaCakes118
Size

24KB
MD5

5b6ebf339041c451b185143ebc5803c7
SHA1

634d63109f73c965464163dbabc6b3b217a0eb45
SHA256

758fdd3acc6e2c3f72677ec6080ffe16dfe0ce47896bc1a2a9b4137db9bd0e18
SHA512

eb9b1c0e7a340266b33985e465fc98111546b4592c13ce9fe23d0aaa5cfb07ed6afef3d7511aa1da144b18d3a1ab7a9c43506fb22bb3e1f96c17dc4a3eed841a
SSDEEP

192:Po8VIvo3ORt/Lgq9bbOzmN1htqhvB9DbmNF3Ygk8ORt/Lgq9bbO8d2:Pf3qz9emN1htqNiNFIgk8qz9Pd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b6ebf339041c451b185143ebc5803c7_JaffaCakes118

Files

5b6ebf339041c451b185143ebc5803c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ebc0fa33c966226b0cf7ae239c63476

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord645
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ