5fd2d86eb9b6be92f9e27e7382f9690f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fd2d86eb9b6be92f9e27e7382f9690f_JaffaCakes118
Size

236KB
MD5

5fd2d86eb9b6be92f9e27e7382f9690f
SHA1

27cb24a111b5661627bb9190cb7ee6d72d9309ab
SHA256

e103768abc0c387c5c804b6db6ac2061e22b84a8fc8000dbecb58c4da8b6e8eb
SHA512

4458a1dc42dc8e23751eb5a7b145bd5d4b7dd0ec4d09e2828fe1515b4849773828344f81af61495184a8f0ff4dd5199d4fa32a7e50dce236bb283ac0f365eea9
SSDEEP

3072:mriYTweIIEX/0hc1rBr3Fbkce307hYkP1YrfdDH/f9Qeflc:ATaspSefm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd2d86eb9b6be92f9e27e7382f9690f_JaffaCakes118

Files

5fd2d86eb9b6be92f9e27e7382f9690f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5240e2db1867a03f8264db0576c23e53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord618
ord581

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ