5d9551a9e323892a1c4cd64ccb325db8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d9551a9e323892a1c4cd64ccb325db8_JaffaCakes118
Size

472KB
MD5

5d9551a9e323892a1c4cd64ccb325db8
SHA1

26c95203debfed08eaacde84344e046cbbc698ab
SHA256

c19d10a2bfbdf08cca1955fd01791189874d1da68bf984c07d111371063fd8d2
SHA512

2708db4dd04a838a9cb47b9433f6c426c02b10111659703d84bac45c41c106ff3de6270c710d5a6b66a464bb9c92c130566d18e1b5d880925496ed50a45ce813
SSDEEP

768:wSxT/3ISbCjc4OSgTajqDsfdJRFnTnQiIkD/CUJLb40nNT6BT7xpbZhfnfjrMvX:xTgSJTa9zWpbfnfjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d9551a9e323892a1c4cd64ccb325db8_JaffaCakes118

Files

5d9551a9e323892a1c4cd64ccb325db8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3557666af5b0176592f34b68843bb74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord596
ord598
ord599
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord716
ProcCallEngine
ord535
ord537
ord645
ord570
ord648
ord571
ord681
ord578
ord685
ord100
ord616
ord617
ord619
ord580
ord581

Sections

.text
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE