5e558bc61a6b1188c44180ae7547e949_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e558bc61a6b1188c44180ae7547e949_JaffaCakes118
Size

444KB
MD5

5e558bc61a6b1188c44180ae7547e949
SHA1

987c202c3df8eece4b8e2b5bf185c0a8801a9b5f
SHA256

6d0d0d87feb42fbc47c778e8d0cbcd3ba7f7235440149e922cf050c461b4912a
SHA512

2d9ecd611eecec7192696f4b0c299049101dcaf8ca635a38ea7889df6317d45ab82e9035c2900daf9b355c9542f58dd644ccf8d3df6485e328b176bfd0cc7496
SSDEEP

6144:ZoGD13xaFLLuLWJ2W0vcDdeHxaIs4M96Y1gPZ8xeD/:WQ3xaFHVJfBAHdi4sEym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e558bc61a6b1188c44180ae7547e949_JaffaCakes118

Files

5e558bc61a6b1188c44180ae7547e949_JaffaCakes118
.exe windows:4 windows x86 arch:x86

deece9882c745f50932d0ff56c051341

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord665
ord593
ord594
ord595
ord598
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord681
ord100
ord616
ord617
ord618
ord650
ord546
ord547
ord581

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ