5f52806ddb6b1754ef9745fbbd6e7a60_JaffaCakes118 | Triage

Sharing

General

Target

5f52806ddb6b1754ef9745fbbd6e7a60_JaffaCakes118
Size

76KB
MD5

5f52806ddb6b1754ef9745fbbd6e7a60
SHA1

c40267ec4260e4f9a2f0a4f95052b666bc9c2594
SHA256

84a70a430162912dea0973b9cc3542aa11af600dc5fc1b011d2ccb7f1a98f7d2
SHA512

f1854584cad5cc15df7b9815fa5f800b58dd01e272b227468f9b55f3f58d47080d6ef785656efb47526128741fc58178fcc81ca0b11a80eea3afcf8d6d204f6e
SSDEEP

1536:fmguFSp7xkGFUWjThvD31gWgou0I526hWjT:fmgGmHjThL+touLQjT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f52806ddb6b1754ef9745fbbd6e7a60_JaffaCakes118

Files

5f52806ddb6b1754ef9745fbbd6e7a60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11fcb587338db87f35291c6eedb357d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord571
ord572
ord573
ord681
ord685
ord100
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ