b2f3b8df8cef2ac8e5fa91fd528e4905_JaffaCakes118 | Triage

Sharing

General

Target

b2f3b8df8cef2ac8e5fa91fd528e4905_JaffaCakes118
Size

36KB
MD5

b2f3b8df8cef2ac8e5fa91fd528e4905
SHA1

5cd504199b6ea2d3edc16c8429f3dec385d6a62f
SHA256

bc7c7a1e2c38ea01383058854a592e65e50af3aeba628fdd92737c9eb288e498
SHA512

8509bf35d058ae0c4232542a0ae6ae8a3c0055a73a4b03449201cef553a66151d346c3fcc5ef0262cdf11ee4dd24849aa40e046685d60760bdef4d6bf54870e1
SSDEEP

768:CGExyBYZV+1pF8XTZCwGodZWJI3DeX6X8dYUMO:CGEEYZV+CZCwGoeJI3DeX6s4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2f3b8df8cef2ac8e5fa91fd528e4905_JaffaCakes118

Files

b2f3b8df8cef2ac8e5fa91fd528e4905_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ecfabab713df0aa44f2dc3e07a2f1b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord558
ord593
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord537
ord573
ord100
ord689
ord616
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ