b2ba7a7adc362fc1c1f7d992c13a91d3_JaffaCakes118 | Triage

Sharing

General

Target

b2ba7a7adc362fc1c1f7d992c13a91d3_JaffaCakes118
Size

260KB
MD5

b2ba7a7adc362fc1c1f7d992c13a91d3
SHA1

c70ff7db484617f077d7ac681eafa710c886f815
SHA256

14dbfb6f00dbbb6fda37a0b49ba0bf2fc754bbff35ea8cd64ab0f8a9cbba8466
SHA512

b29a79de29da79d7ea5987d8f10f9e94a69f8dca501005c8530b808451e6d08d5b7e79e22bef5a3b4af8f3eaf84b756e4295250d3da1d990a9441588d76d1c3b
SSDEEP

3072:6xOGBuh5x99hAg8HatV91Ak0jhg9668atfx1R+SDz8mGRNcLfN/lj4OXB2rSiWVT:pAvHask0lf6RD8NS7iWV8Eo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2ba7a7adc362fc1c1f7d992c13a91d3_JaffaCakes118

Files

b2ba7a7adc362fc1c1f7d992c13a91d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85d4c204e25738c66c65008e16ac79ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord595
ord598
ord520
ord709
ord524
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord713
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord573
ord681
ord576
ord578
ord685
ord100
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vabxiis
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 60KB - Virtual size: 60KB