bd69dc214881f1fda51af64f3f8a1057_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd69dc214881f1fda51af64f3f8a1057_JaffaCakes118
Size

248KB
MD5

bd69dc214881f1fda51af64f3f8a1057
SHA1

ace303f0b0ea29a6b010110b0fe13646b84fd6f2
SHA256

c95375c27ac7b7fcd630b29ed13eda084d5f3e33998afa4265c132ee0c65a26d
SHA512

ce422d6dad840e433d0234c97878e8ab1f418351ab15755febbda4d3d2e4692d2a1423a85be9cb1bd0e9a6dd7fc1b3c2dec70e68631bbbf6311d819b0114a1cd
SSDEEP

3072:mkJkq3nulFtcOVH7L0+/RBRgll5lb5zGGL:m/UnuhTNGl5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd69dc214881f1fda51af64f3f8a1057_JaffaCakes118

Files

bd69dc214881f1fda51af64f3f8a1057_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5898466325b9646a6c51f94766f7cece

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord512
ord513
ord514
ord515
ord516
ord517
ord518
ord628
ord629
ord594
ord598
ord520
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord616
ord617
ord618
ord619
ord542
ord581

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ