b5c4e0ababf8940ecbc8da4fff8e0304_JaffaCakes118 | Triage

Sharing

General

Target

b5c4e0ababf8940ecbc8da4fff8e0304_JaffaCakes118
Size

264KB
MD5

b5c4e0ababf8940ecbc8da4fff8e0304
SHA1

b5e315aa162cbb1008bfeadb9a14adfebc2a130f
SHA256

a8acfe19e95c2d7e6a4c0413326e1a1ec064a5575a39bbaf3a81ddcd071f2618
SHA512

aebf942887db223df1bc79a3bab3efcfcdc8b96a8e05474decf805aaf9d72a64727065aae857c627953137785ab1674d904968bdf2233e2cfa256205ca62af5b
SSDEEP

3072:ENBkEyCITN1b5yOle8bKKk+fWFUrARwLkfly3uhNGcE6LX:U+Tb5b8EKLfhhNGL6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c4e0ababf8940ecbc8da4fff8e0304_JaffaCakes118

Files

b5c4e0ababf8940ecbc8da4fff8e0304_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ae1b76d35894a0d6e5fbf50b1a9a3bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord301
ord595
ord303
ord598
ord306
ord520
ord307
ord522
ord309
ord631
ord524
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord647
ord571
ord572
ord573
ord681
ord685
ord100
ord579
ord689
ord610
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ