b057e6fdbfab1fe36eaffa7ed233c373_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b057e6fdbfab1fe36eaffa7ed233c373_JaffaCakes118
Size

428KB
MD5

b057e6fdbfab1fe36eaffa7ed233c373
SHA1

e2804830073ac0a7620234b78b298291dcc83992
SHA256

d27afd0fe04232aaadfe088a4091ff430924cd653fb8e4a9f8eeab038194d1e2
SHA512

295136e5b368968be347d746af09219b8e2da4124a118ea4b8bef173ae72e5774ddc71cf5c0cab0c26e3c3390ca98b9ab02a349c99fdd9c6c13e80ec1fbe00d7
SSDEEP

3072:yMIX0e1FB/DpKjCLHAm3NsTYw5S3nllrR3b9Ta0hyeJyU8nY9Nqnbvon5SCNYzg:8sccwrvTa0hxW8azg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b057e6fdbfab1fe36eaffa7ed233c373_JaffaCakes118

Files

b057e6fdbfab1fe36eaffa7ed233c373_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8d04caf52ac023de8a509362c08e676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ProcCallEngine
ord644
ord572
ord100

Sections

.text
Size: 396KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ