5ce4a209d64cb78de5d39434764abd0b_JaffaCakes118 | Triage

Sharing

General

Target

5ce4a209d64cb78de5d39434764abd0b_JaffaCakes118
Size

96KB
MD5

5ce4a209d64cb78de5d39434764abd0b
SHA1

771bbf24b89f6dfa2433f575bf098b4028dd4cca
SHA256

6e1922d031ada08eec6c0cde7636d07a584809663c34b4522f5405bf84815667
SHA512

39ec95816d49b72e7f8ad7c19bf3409cb25a2a054cd2be26afc2adea20148c8d223af357d7b86c24b6d6e91dd35912df5eca27b2915902a6a4c072fb45e3d0ab
SSDEEP

1536:evEg52NbtyVQO8PXychAdwjj3RJEEo/k3gzinynEkRldUEPjlijOemNIjnZW:cE/NUOychPzRqEkMCRld8mCn0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ce4a209d64cb78de5d39434764abd0b_JaffaCakes118

Files

5ce4a209d64cb78de5d39434764abd0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8971d7ab98c65dd07386e484ab036050

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord578
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ