5d9326eef8e0745be216ead9789fc3f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d9326eef8e0745be216ead9789fc3f3_JaffaCakes118
Size

344KB
MD5

5d9326eef8e0745be216ead9789fc3f3
SHA1

a9f5d17c8f1a511475a6eb14059ecc6de38f7cb6
SHA256

c032f318bad2a79b9002dc2c7e52ec7bee901a8f78d87e8d69fe73b3ec20d69c
SHA512

bf8da3230d78d4e8f77007dd1781afebefc36f665f790068542c6ba1ab6b2e4141a27a5acab3c794aefaf836dbde323bde313b59cc1c9773d155684f9f3fa194
SSDEEP

6144:s/15Wj9rkvDUsWmHqtWKagaOyIt33Oq6aD:s/AWWmHqt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d9326eef8e0745be216ead9789fc3f3_JaffaCakes118

Files

5d9326eef8e0745be216ead9789fc3f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

504d51372c90647bb5240bd2f5139f0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord519
ord662
ord593
ord595
ord304
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord607
ord714
ord608
ord717
ProcCallEngine
ord537
ord647
ord573
ord681
ord685
ord100
ord612
ord616
ord617
ord618
ord619
ord546
ord581

Sections

.text
Size: 328KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ