5bf586d0c7beaf7b775d752bf0cb6b45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bf586d0c7beaf7b775d752bf0cb6b45_JaffaCakes118
Size

28KB
MD5

5bf586d0c7beaf7b775d752bf0cb6b45
SHA1

6b211ffa6a7b82032b6907facb4a42b5e86d1c8b
SHA256

2bcee47e3fdd3c90bfcc0fbd1a60c53bd60aa0086fc20a97d6adc3a3f979bb80
SHA512

043a1ce157ab5868047528c13ec860cd5a5adf3ea411c6bdcc3c5ee414b980e88b026603b8c044eee90fe05011670a572c18f1191966d99cfc10f75ef44ac7bc
SSDEEP

192:C8pn6morV5wCl3EM2sc095716U1KpWzxVssTclRataSa7ACwwPyDzM:C8pnuNEM2l0ccKpWollQJ6ACwwczM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf586d0c7beaf7b775d752bf0cb6b45_JaffaCakes118

Files

5bf586d0c7beaf7b775d752bf0cb6b45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0ca12e453dabe34f34f949b9baf8ddc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord300
ord595
ord599
ord306
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ