5e6d72366d4eb2a7cbe7b881a6bdbfdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e6d72366d4eb2a7cbe7b881a6bdbfdd_JaffaCakes118
Size

72KB
MD5

5e6d72366d4eb2a7cbe7b881a6bdbfdd
SHA1

0f73f7cc0e810ea71b69d98fafcaadcebc0cb95d
SHA256

7219c46e589465ceace5864d6e30a9f06b0b4bfae498f87cb9bf52443ddb4529
SHA512

127f37c7a19bf372ef4229f179689eade9375aa8fb897056a9e118245effaabd5446f06dd5a422e6ece05e23ad45d7fe9f75f6cbd04003a0f5530be829ff4204
SSDEEP

768:ki47vGwafOz5CY+AChYySlBWcSWpj59kJDs:ekNXGyjWptSu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e6d72366d4eb2a7cbe7b881a6bdbfdd_JaffaCakes118

Files

5e6d72366d4eb2a7cbe7b881a6bdbfdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fb774c6763cc2a38c0d23ec72ad05fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord572
ord100
ord618

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ