b50cb93bf14a4e435449d93640e65a8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b50cb93bf14a4e435449d93640e65a8e_JaffaCakes118
Size

244KB
MD5

b50cb93bf14a4e435449d93640e65a8e
SHA1

ef99c41d472f43692843c0da5f5fb33850b91c48
SHA256

a14fca3fae3c264d857c4b20aa65a7bcd089cb5ecf1dd2e01328ae813d2e0f2e
SHA512

c8b004dbf35f1ed8935ea55529ccc3149bd392a4f9cf096ee8727f963c1b1341de7571a0f84f27f9ea65009b59d17fdc3b2b79c95d471f171dbb7b044c1046f5
SSDEEP

6144:XvPc8QSTe1kBvsb4sbKv6FlPSndyAsKWr:XcRSa1c+d7y0nNr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b50cb93bf14a4e435449d93640e65a8e_JaffaCakes118

Files

b50cb93bf14a4e435449d93640e65a8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b371544be60077b73a1008995b76da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord618

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ