5c74be0ff6ca48c9889e4cdf7c254d77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c74be0ff6ca48c9889e4cdf7c254d77_JaffaCakes118
Size

68KB
MD5

5c74be0ff6ca48c9889e4cdf7c254d77
SHA1

ae3dd0bd6baaddcfe2f8cf08ee3c57bf4eea4a60
SHA256

95cd3f51b11140f7b8dca48d619d5b53082333e02347d60f1d1c9353c84d5d0e
SHA512

e4f03b6897f4de3f544d144615933749beb63b45eeea3a559115d8435d2cd3e505ca635bb2cb1bb9d3eb36b1c67829b66d403b2ee494c791f46594687268a391
SSDEEP

768:LqtEexMp8VwBvGVASRJB1ljrgdmf+S1JBhhzoqyUcVUUdbWUj:e1MpfvcJgdW+S18v5iyj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c74be0ff6ca48c9889e4cdf7c254d77_JaffaCakes118

Files

5c74be0ff6ca48c9889e4cdf7c254d77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1040e4a3e4a8f3503bee8cba22145bc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord595
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord531
ord717
ord645
ord571
ord576
ord100
ord610
ord617
ord581

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ