5d87602da9d2e88eb8bd4b71647d171d_JaffaCakes118 | Triage

Sharing

General

Target

5d87602da9d2e88eb8bd4b71647d171d_JaffaCakes118
Size

136KB
MD5

5d87602da9d2e88eb8bd4b71647d171d
SHA1

fc6a536d444809eb346579584c3cd3d09520ec98
SHA256

2cd98ea8fed12c82da86072fbe57925b74024e987054fbb208d97f1a4098daa6
SHA512

4b8e9c0d1f8efae822d187aa9fab7fdcfa66daa11360ef88be150a2b2b281de464c00fcd60ac3c2b277b279f9415ee34e92f6fab6dc93501b1efa82b9c53d08f
SSDEEP

3072:6k9UEUbaxvN3wSUh2XZDutcHdVmn8+rod:6k9UcI3qdVy8+kd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d87602da9d2e88eb8bd4b71647d171d_JaffaCakes118

Files

5d87602da9d2e88eb8bd4b71647d171d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b66a6af34a23991533088f9ffa978a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord587
MethCallEngine
ord516
ord517
ord518
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord685
ord578
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ