b371f5085da949ba13c5dbd11b1b63b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b371f5085da949ba13c5dbd11b1b63b1_JaffaCakes118
Size

56KB
MD5

b371f5085da949ba13c5dbd11b1b63b1
SHA1

f7bd3c3f0ec91ae87bf7b9bfc1acf8af2fd8fdc3
SHA256

8e7a4c8a07b1f695db1a2fb92c8ecd042c98e28ef128cda08ce565709197b3f7
SHA512

988e237b2d88ae6c7a32fbb01c8344ed288ef5111507b99b7f1c37ef1affe619be664584c89379e5efac2d6b61d8f04dda95d3482ca97e4a1ebd45017d7a57dc
SSDEEP

1536:0CQ8VaH92fC7fRJBAoQow4DLzrz7DKSaiqStV9lNltMUsks0PXfnVtN1PkdM4qA:o8VaH92q7fRJBAoQow4DLzrz7DKSaiq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b371f5085da949ba13c5dbd11b1b63b1_JaffaCakes118

Files

b371f5085da949ba13c5dbd11b1b63b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8170f77fb324d61e883ccd2cd5d70fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord595
ord599
ord306
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord716
ord645
ord648
ord571
ord573
ord100
ord689
ord616
ord617
ord650

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ