5cebffecdcaa3ac481729dafdff656f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cebffecdcaa3ac481729dafdff656f2_JaffaCakes118
Size

152KB
MD5

5cebffecdcaa3ac481729dafdff656f2
SHA1

694e15a494cd271b4ba659ce7fe46f5e38889b27
SHA256

a80b2a408716ecb06eac22691804e4f0d9bb2fcdef48159f32e61eed0ad36a12
SHA512

6735047fb5eb4e3510166c11e03936c4a3f844392cddb0a0a9dc15d3eaa8fd1e47e29c4d6f6230a2b68e2fac345d89b64a6a7bb9628cb2d2e0a1365e3d0b7430
SSDEEP

3072:QoqEUP0Fx0k4MWJjFalEadPFO0c6p866zn/44712j:Q/1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cebffecdcaa3ac481729dafdff656f2_JaffaCakes118

Files

5cebffecdcaa3ac481729dafdff656f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b733f1f2b65539a445e003cbaa19b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ