5d57ff5560214f273564d6266dc356ab_JaffaCakes118 | Triage

Sharing

General

Target

5d57ff5560214f273564d6266dc356ab_JaffaCakes118
Size

1.2MB
MD5

5d57ff5560214f273564d6266dc356ab
SHA1

68f0692dd06e652c69088fab92b77936f3d14593
SHA256

bc32822ddc4e5218e1ab9108e8c8f980aa57bf288bb43ef20ea429664de342fe
SHA512

f18f3853500f90889fdc63012d6badb1878e601d21492ed48100549f69e38877b65a0a2b6456fc5d4af2966b4aecb9c41490aba226a564fc2bce675233513280
SSDEEP

6144:v0ZzzLLayYKVubgP6qsoiAWsj8uOm1bvabbTRH9sZGqmZNqY9cgDH2yAwTK793C5:v0RHLpzEN6OzfqUaSHNSNDWjU0RHLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d57ff5560214f273564d6266dc356ab_JaffaCakes118

Files

5d57ff5560214f273564d6266dc356ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

971bd8e33e753225c8df4779ad6a92ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord681
ord100
ord581

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ