5d5fda16c54d0cf8e9cf051a2bf36b1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d5fda16c54d0cf8e9cf051a2bf36b1d_JaffaCakes118
Size

726KB
MD5

5d5fda16c54d0cf8e9cf051a2bf36b1d
SHA1

f744e147aed8e3e6bbff04877c0dd6c8dbecbb9e
SHA256

59b173e34a6b549e9ea347561f586f251bce16748a997e1dd6d1c07a13f2934f
SHA512

0b0b6b6a7adef92bf82c1f322a69f2e0f3118f6059d0c4a2d7e741da3a4b7d53115a4f9a3e4172db9f8bf98d866cbd973ee524700f496809dbf0bfc7a13bd6f3
SSDEEP

12288:dHtwrswnWhFEcUTJZY/0O343BKrLdSdLLEfs+THjDWBqcYRpe:dHt0sKWhFEcUTJDO8GpSM7jDWBqcYRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5fda16c54d0cf8e9cf051a2bf36b1d_JaffaCakes118

Files

5d5fda16c54d0cf8e9cf051a2bf36b1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e94a1f3b8413a6078ed16e1810a04bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord666
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord530
ord717
ProcCallEngine
ord648
ord570
ord100

Sections

.text
Size: 719KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ