5bb4ce20ccbd7dbea1edbcb0a493cde4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb4ce20ccbd7dbea1edbcb0a493cde4_JaffaCakes118
Size

296KB
MD5

5bb4ce20ccbd7dbea1edbcb0a493cde4
SHA1

a241adc9c026615a7fe8f739170ac9689c9a12aa
SHA256

3fd5c605839d254e2a8d07123b923e0ddb798d15d06ebbc936288d1e14d79bda
SHA512

a4168f7b20a98ab96d395b8a156562c83c8383990b4e6f0844911871fd837b210ae27d6a01cca15c35b796a25eaad3b588a42823c2f1ec89d9580bf844c0f657
SSDEEP

3072:C5XpMOV4IlksoM2YidoXBG8kixnkOodra+QTdZKTLZrTO51Icfmz++QfRTob:YZmO/j0lPel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bb4ce20ccbd7dbea1edbcb0a493cde4_JaffaCakes118

Files

5bb4ce20ccbd7dbea1edbcb0a493cde4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1d7a3d2365d97bab7e41f4de39ba37f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord619
ord581

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ