b1e5a855bc7fe09c376b9b5720a45151_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1e5a855bc7fe09c376b9b5720a45151_JaffaCakes118
Size

600KB
MD5

b1e5a855bc7fe09c376b9b5720a45151
SHA1

82fecda6eac2025fbd977dacffd26f68cb9bbb50
SHA256

302d8e122a6d54f9aae9c2a0ef0d14c58dd763b96c52259b8b0565bfa402ab86
SHA512

83d94252a66f707c4a2e340752de07794d0d2cf785886a14659a030a906bd63747cec3c5480cb75e3caaaa28713b2d9fbafe68103425ec3545088bf7ea5496fc
SSDEEP

12288:5MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMFkD6a8Ikrk05mFMMMMMMMMMMMh:5MMMMMMMMMMMMMMMMMMMMMMMMMMMMMM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1e5a855bc7fe09c376b9b5720a45151_JaffaCakes118

Files

b1e5a855bc7fe09c376b9b5720a45151_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ