b1c50f8d25bf9b76236459be67c7ee10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1c50f8d25bf9b76236459be67c7ee10_JaffaCakes118
Size

216KB
MD5

b1c50f8d25bf9b76236459be67c7ee10
SHA1

c36e3570861fdfeb1df1c4ed711cdcc46543c3d7
SHA256

5be00b62b7c0525d8bf22ce15b935e691f275afa7b74295022bf18c214f7c2c4
SHA512

fb68ebba24af7def990a0676c82e6efb09fe76fbda0aa57ff7630aedc76ccaed33c9f8bd74cfb0503da86c5d0e9f0f1ac81e117b6dbd507c7e0897b17d119041
SSDEEP

1536:/EGdn7f8RZ865JlPRUqrO5Igkb4ub91baF6ip/oMooI0EC45bgOucqXlFh:sGdn7Eo8+qyu/b4uJ1CjYbgRcKh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1c50f8d25bf9b76236459be67c7ee10_JaffaCakes118

Files

b1c50f8d25bf9b76236459be67c7ee10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ