b1d9ba13bf438abf46cc0c73b2688af0_JaffaCakes118 | Triage

Sharing

General

Target

b1d9ba13bf438abf46cc0c73b2688af0_JaffaCakes118
Size

216KB
MD5

b1d9ba13bf438abf46cc0c73b2688af0
SHA1

b79bdbb24eac827da81eef8b65c74b4542823f59
SHA256

45250e0b0fbf2baf0d182d76034b59f8dee87df52f327811b1ec85d737fecef0
SHA512

3c368a2fb3c4b694a4342b353a2afe167972e4f3441e68cdeb6451cb776cbdc8f749acae943d1f2aba5d7e9eebf074ab1dd50933e4b4545aa4feb5dc874fd80d
SSDEEP

3072:fpx/qW5pgjHmQuP8QBnskbanivFbMEb9J8buaVkUSS:hxt5jaawbuaKUSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1d9ba13bf438abf46cc0c73b2688af0_JaffaCakes118

Files

b1d9ba13bf438abf46cc0c73b2688af0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5f1fd4304f9dffe833b43de2acdfa36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord645
ord648
ord570
ord685
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ