5d78634a8cf77b70fa3f1de69040fce0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d78634a8cf77b70fa3f1de69040fce0_JaffaCakes118
Size

36KB
MD5

5d78634a8cf77b70fa3f1de69040fce0
SHA1

4846c83fe8ac81a58d2fb41fe29599496f7d1bf3
SHA256

5063ddd20fc1e5aeaecbe63d313e29dcb1aa60f81b02300ce1eff27f8cb1ccd7
SHA512

5c75146e4167d8b7af7cd5e9255ef289813ad8da5e1f890d926e306f240e258c9e466d601b9052e83cc46b7c5c497904d1e202f4405c9357d0399d6a3cfaf71f
SSDEEP

384:HvzhQoe1N9ccNsa/ZNDSBtGYStY5nA9FKzrTCw11qx5ZAU/Jw6sNRmt/gAtMH+Vd:U4cNR/3MPwZFKzrTCwwNw617

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d78634a8cf77b70fa3f1de69040fce0_JaffaCakes118

Files

5d78634a8cf77b70fa3f1de69040fce0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1f8406116644196a1010c364025b6d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord666
ord593
ord594
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord531
ord716
ProcCallEngine
ord537
ord648
ord681
ord100
ord616
ord618
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ