b1434d720d53ca7a6727b92cb07449a0_JaffaCakes118 | Triage

Sharing

General

Target

b1434d720d53ca7a6727b92cb07449a0_JaffaCakes118
Size

280KB
MD5

b1434d720d53ca7a6727b92cb07449a0
SHA1

f07af7204e39fcaccb91ae9af9f128aafa008626
SHA256

40b91afb7bd6cfdaf3a294b216092a102273f17c76b6b15cff65e16942a1a2f6
SHA512

9e8bf3fa483d75a66aab646987f8ea6fada3ca0a7e9f8fd6c2d4c0c9ebe4271133b7afee99de99abf4a35f4205702085263fcc97e3d4a24745c3124fc084607d
SSDEEP

3072:pAx8pNqyngPCm9bWmalRihOqPCzV0FiKmhn5/mg70DQdTZ8EAK+fZzhyBoxXbH/c:pwYya8KwDQIEMf2qLne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1434d720d53ca7a6727b92cb07449a0_JaffaCakes118

Files

b1434d720d53ca7a6727b92cb07449a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d8072a5b9977b56d76d7f4ce52573bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616
ord581

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ