b99560b23e0fa43c400eae2bc8f59e0f_JaffaCakes118 | Triage

Sharing

General

Target

b99560b23e0fa43c400eae2bc8f59e0f_JaffaCakes118
Size

135KB
MD5

b99560b23e0fa43c400eae2bc8f59e0f
SHA1

386f0e37e9af988a6d1e3924bb42c0c08ca7f120
SHA256

39b86217f34e5ffe1f3cce5d078901b7cc0afb6bd51f99272c1f8996fd86b914
SHA512

5e3adacc91f68772a6595dbbce3a43fa9417096339a43a274dea9a0f217fc71b379f3aa94ef80b62882bced0f59d70fc61feaa2b812ffdbed6c4929375d9ab73
SSDEEP

3072:6VjpVI2nsBAEcmWOSWvIVLozHVYuhf83R4OEue:OXo9ue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b99560b23e0fa43c400eae2bc8f59e0f_JaffaCakes118

Files

b99560b23e0fa43c400eae2bc8f59e0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e67757e31b92f20555578c0ccf3464d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW

msvbvm60

ord696
ord516
ord519
ord666
ord667
ord593
ord594
ord595
ord598
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ord716
ord717
ProcCallEngine
ord535
ord644
ord681
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 19KB - Virtual size: 20KB