ba0dab512a360b6e85796df32dd53b00_JaffaCakes118 | Triage

Sharing

General

Target

ba0dab512a360b6e85796df32dd53b00_JaffaCakes118
Size

244KB
MD5

ba0dab512a360b6e85796df32dd53b00
SHA1

4f448693218ec0d575502a564b590b112511947b
SHA256

22d3b217dce55edc6e2cf43c118b6984724a3c0c7a1098791f0aaa12a3b5070d
SHA512

b706ef109d90fe9c833615a6fa18b5728f0ecf6f4dc95c666b0d15da9df02e6ed23dbde31f6238ff6b6677091613f6a3f84974a6ad1076c33c5bab7ca93c0ace
SSDEEP

1536:xjMCT0ePRnbZwK6TD+HZ5zpqKhc/Ndcu+zRpbsvYDktZW+aTFC+Ci0qIRCpEVjgl:HT0URSKsqH4t+FeUktZW+aoPjW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba0dab512a360b6e85796df32dd53b00_JaffaCakes118

Files

ba0dab512a360b6e85796df32dd53b00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3e868d8889ca1622b41efc95ee37045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord595
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ord608
ProcCallEngine
ord644
ord537
ord572
ord681
ord100
ord616
ord581

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ