5c3b2e3e5ab5aaa1e5a60a79872e813d_JaffaCakes118 | Triage

Sharing

General

Target

5c3b2e3e5ab5aaa1e5a60a79872e813d_JaffaCakes118
Size

21KB
MD5

5c3b2e3e5ab5aaa1e5a60a79872e813d
SHA1

49a5e3194fbc0561f97690705ed0374706e62d56
SHA256

1cce4f9fea3b56ed39b1c551b89169a70aa7d9c8e8d4aa6af1ac7d75ec716295
SHA512

18f2ef54e31f8d012820cdde2e09490fb8dfd34c5e12b15ef534a8ec4f8e4d68f53f02465163533fb5994e4f922bcb764b135e2f74f6fc43871df39fd3ef1b7c
SSDEEP

384:4tbI9iVLOp0epSs4fH7LUNDnfvDvuxjw+CzNvOHI4emohH:xJ6epSHbgxnf7vurCzNvOoxmoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c3b2e3e5ab5aaa1e5a60a79872e813d_JaffaCakes118

Files

5c3b2e3e5ab5aaa1e5a60a79872e813d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

979fb227ed62f6c626f50b68d5b3f7b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess

user32

ShowWindow

msvbvm60

ord696
ord697
MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ