bac9423c50bc7fbca950d61fe605d331_JaffaCakes118 | Triage

Sharing

General

Target

bac9423c50bc7fbca950d61fe605d331_JaffaCakes118
Size

188KB
MD5

bac9423c50bc7fbca950d61fe605d331
SHA1

8114933ec44b0394f484dde0e42eae7a83a211d2
SHA256

e3942266e061c6680998b115556d53f67088966ed713c243b06d7df2e3c8e5db
SHA512

2b39ba8ec34450005ab128ce77f4930631541f758b0ecc07c3903b18ccdbbbe006fb9b20cc2d6749c46ff85409d63c6182958c4c1088acf4a98f0b484369fec8
SSDEEP

1536:AXOiyw2fNcXYaWHIa+MCrAmcz1Ww6kRUNNHw2fNcXYaWHIa+MCiimX:AD/0NcXWIomcz/6k4Q0NcXWIzm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bac9423c50bc7fbca950d61fe605d331_JaffaCakes118

Files

bac9423c50bc7fbca950d61fe605d331_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1194b2e983fc422ce449a00b353e8490

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord596
ord598
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord100

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ