5c0d79e9867fefa976c6aaafe2c6ca20_JaffaCakes118 | Triage

Sharing

General

Target

5c0d79e9867fefa976c6aaafe2c6ca20_JaffaCakes118
Size

38KB
MD5

5c0d79e9867fefa976c6aaafe2c6ca20
SHA1

a6fdd54b2e99f4e4ceb9e3222f63caf1f2327c06
SHA256

498d8850ab67d74b055ee2b5ca5a7d5b0edccf47fe48b306249287dcb95ebea8
SHA512

177c38d4914ec8dec17ae77ab04b311fc566f4b456ce14071232d65a35192673f6c2594a91361f713d4cd7125ee74a201eb294cf2a2110b19839d59902fe0296
SSDEEP

384:8v7QykrJIUWTtIVysBwy3q2SCPe6zd5+s2w91ZAAAAZuCr2Rl5/XaEX3q2SCPe6H:C7fdsBC2SCnzp2CaV/aEK2SCnzp2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0d79e9867fefa976c6aaafe2c6ca20_JaffaCakes118

Files

5c0d79e9867fefa976c6aaafe2c6ca20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b385b1ccafe3b8c4749a957a808d3f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord681
ord100
ord619

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ