81c54f6a789c1e036eec167c84255ec5_JaffaCakes118 | Triage

Sharing

General

Target

81c54f6a789c1e036eec167c84255ec5_JaffaCakes118
Size

28KB
MD5

81c54f6a789c1e036eec167c84255ec5
SHA1

a063280cf40cf36a8b74fce6d6b18ca2ac83d586
SHA256

b6d5f7e898728f19bf413b1aaf867b313024ea025c28079efbebb10c7f317bc3
SHA512

b4add74313648c60e4a8781d96cf1470415c1537c17eadddddebb5a3c000b6dec725d7617018a1c10032d5c7b36c034a3d1c5c24e04c6d28a0c32d3322fa2efc
SSDEEP

384:bhmFkxYRrBFK7zsVY8+g9YQ/mxnoLO3jL3jqga8+c:bpYRrB07zsVY+OpoK3P3jqga8+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c54f6a789c1e036eec167c84255ec5_JaffaCakes118

Files

81c54f6a789c1e036eec167c84255ec5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bce9ccc91a3de4cdaa60101e8d39ab2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord617

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ