5d4469e74669f32af369db5d0d6c522e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d4469e74669f32af369db5d0d6c522e_JaffaCakes118
Size

293KB
MD5

5d4469e74669f32af369db5d0d6c522e
SHA1

e9b9c5d297363ed14202631a3a80a3610f20b312
SHA256

17de546183e5bde849eb610f96e25fc2d25915b70bd24dda06aea765af1ea5ca
SHA512

7fb1e19fe148d3804414d7a305ba820a515e99739bf7cd35f17f4a00f382ea307c52cbdf581aff22b78d497151438e9d0ad81b6eb1ae82da9965399c8e3d764f
SSDEEP

3072:c/VGEay5VjJQoGfcrpWjzaCF3HOjLyV1S0ZTHc4do+4mAtkjuVDLFK+YYX:yVqxisRkKotkjyXs+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d4469e74669f32af369db5d0d6c522e_JaffaCakes118

Files

5d4469e74669f32af369db5d0d6c522e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e59daa932f0469d4f36b673938ef52de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord596
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ