854a1aab05c5a3b98d4aa7cee24d56f1_JaffaCakes118 | Triage

Sharing

General

Target

854a1aab05c5a3b98d4aa7cee24d56f1_JaffaCakes118
Size

131KB
MD5

854a1aab05c5a3b98d4aa7cee24d56f1
SHA1

a7820daec953b75a4854965d0696398606ebe85a
SHA256

26fa4754ffdaae53f50fca74d226973451105fb25460d24fa6696eca949370dc
SHA512

74c4c06e3c56478e715e0bfebf7370878b12b3b41ca523f3acd9087634a4d8f28e1d4db2b2ebfc5c728cd746a1428b9e18e92ff4f01c909e43f6c51b8a3219b1
SSDEEP

3072:F9joYg1yaWH72jgmdE/Nj1w4Zx1pfYcRZ2v:FboNg72sb/95x1pyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
854a1aab05c5a3b98d4aa7cee24d56f1_JaffaCakes118

Files

854a1aab05c5a3b98d4aa7cee24d56f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ