b977f5da5df0c1d3ad3217e51eaa5418_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b977f5da5df0c1d3ad3217e51eaa5418_JaffaCakes118
Size

20KB
MD5

b977f5da5df0c1d3ad3217e51eaa5418
SHA1

b472c278175ca5e3f45d0de27ede10709d8a1899
SHA256

eaed7fd502b03a1b9c72f22345869a2f155695fc086691cd248f70fc351be8f2
SHA512

09b20c3dab2adfd33f8f01ebb5ddbe7bd6e918aa485c3bebef78c12ce665c19b955e826fc4aab7cd9c26e3ec82064101244e8630d03a5d19ac1e28ecbb125354
SSDEEP

192:TzafKMIbwBKmR5zUVv185F7/QnUkSSjZeJidr1:TsMSR5onaF7onXSSNz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b977f5da5df0c1d3ad3217e51eaa5418_JaffaCakes118

Files

b977f5da5df0c1d3ad3217e51eaa5418_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d1cc8ffe0cfff23354f8f2132cf01fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord592
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ