b50ddb9bf1d81c5da01a236faf4ef09e_JaffaCakes118 | Triage

Sharing

General

Target

b50ddb9bf1d81c5da01a236faf4ef09e_JaffaCakes118
Size

24KB
MD5

b50ddb9bf1d81c5da01a236faf4ef09e
SHA1

b1138fc4bae6dd41d394f842fa8d688acfe57ffd
SHA256

21668d1d3460df7a2b75b3aa6c0d190adef85c62165c4cd7109f967c6f832ad5
SHA512

1d58b138170aa5aa32c0b1132620afee864b982a370fe0dd6a849508e9547ed0c358451c40a89f4be0b7548f26a36b80dc075f81b7a6293d627800a6b35dff6e
SSDEEP

384:hBgDcGm8B9ZCV6VVnSr3iV1550+3jkQLNVxJXH3yU:gDGI4Vo8Yv2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b50ddb9bf1d81c5da01a236faf4ef09e_JaffaCakes118

Files

b50ddb9bf1d81c5da01a236faf4ef09e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f95c4994e6891eabdab6bfa50368f207

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ