5b9c9fae3bef53e925e2ffb16d3cc5a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b9c9fae3bef53e925e2ffb16d3cc5a0_JaffaCakes118
Size

72KB
MD5

5b9c9fae3bef53e925e2ffb16d3cc5a0
SHA1

5933802c887adcbff4bf7d7d566e8785f8a9fe93
SHA256

4c2e258edfdc1ec4a3cd1dbf5d7c7e3946165f18257eeba62e5f0f24bfd0326b
SHA512

420c18e618c528c7653f0690133ffad91725992223ba4cbe55995e248dbddb88e0c395139b5eaba0f90332fdfcd15495602d39c391a24f17f37c60523c0caaa0
SSDEEP

768:iMFvtELyIIdQDHpBHKxLmO5PIORj9TFrT+p2oMMi7vhNzjyZflu5OHopvwiCc7/n:iMFGtKDtoMMyCaYiFSOx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b9c9fae3bef53e925e2ffb16d3cc5a0_JaffaCakes118

Files

5b9c9fae3bef53e925e2ffb16d3cc5a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d149ce855ccb85a21966a23cb9a790e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord592
ord300
ord301
ord595
ord303
ord306
ord307
ord309
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord607
ord530
ord608
ord317
ord318
ord533
ProcCallEngine
ord537
ord648
ord573
ord681
ord576
ord578
ord685
ord100
ord579
ord616
ord617
ord580

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ