5fb6e09f3a9b3b70b73007df15252471_JaffaCakes118 | Triage

Sharing

General

Target

5fb6e09f3a9b3b70b73007df15252471_JaffaCakes118
Size

52KB
MD5

5fb6e09f3a9b3b70b73007df15252471
SHA1

aab9a6f3007af7cc6d4804ef0fc82fa5b1a3d079
SHA256

96a0c8966eb4c6aa7d1f3c5b3b8c896b2410c6b7f730e66dddddbcae1f482c72
SHA512

cc94ff7308cd2df51066083bc654b9c2544f8102e4f4531af3c0d677474a772020072bc7314f0d4e8936ceff3ea769abd52dad1b6b4f5a0a54bbf3d7199851ef
SSDEEP

1536:t71hs2kA10foTAoS1C6XLFuFIF/FmFCFuQ:x1hs2kTuQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fb6e09f3a9b3b70b73007df15252471_JaffaCakes118

Files

5fb6e09f3a9b3b70b73007df15252471_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa4b2f8e20a80864457434aa53961c72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord594
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
ord670
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord100
ord431
ord617
ord619

kernel32

ord480
ord340

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ