89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118 | Triage

Sharing

General

Target

89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118
Size

584KB
MD5

89b5c1059183d6fb6858ef0d46822c6f
SHA1

cf93bbfab7b367ecc1be587e0bc1cf944d7750c5
SHA256

19f649cd3ad6fbfe2c0da673f20ea9636b7d3d6eea392a42b1d04906c4ffb106
SHA512

f6bccb1b40ab4693ec7fd62fd14b491491e64ce924d41ec862ddfec8e9d10576a6a99870887a70ddc5f552f60fa3ba365b79480288c0a42cd7de73553dd547a6
SSDEEP

12288:bGoD/3ZRPEdrLDxIuoNa3UoVUHjw6cH5l+zMeKVnuqpkKI5pRS4h0zhFxh:DjPyrLD1oNaew6I5IYeKVXkKcS4hs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118

Files

89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

399d0c56602046ecd908b623d206d3fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord578
ord100

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ