bbfa53fbc2be97795d26a6111270da4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbfa53fbc2be97795d26a6111270da4d_JaffaCakes118
Size

104KB
MD5

bbfa53fbc2be97795d26a6111270da4d
SHA1

e9abace4061fa98950d3d3209be3102673cd58e4
SHA256

b8e0ebf85ecbcbc811856a664ea1b6909e38474532131e8db9e9865ffba6c248
SHA512

3f8f00f601330e71bb414be2800f14513465caa43dd7fbc96a0e553ad435d8d555ff5c9ac7eacc4dc0fd9685a2cb90250f6b77e4b8e1effc693e68c936055615
SSDEEP

1536:QPO1dQXHACdZItxvrloHV/7UXZMUz0l91Fnqtx88qROSVFhOUVVE:Q6SHvdGtxm578a1lqtX4PV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfa53fbc2be97795d26a6111270da4d_JaffaCakes118

Files

bbfa53fbc2be97795d26a6111270da4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab5179fce29e434e839a81c79a42face

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord100
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kuhl
Size: 68KB - Virtual size: 68KB

.kuhl
Size: 4KB - Virtual size: 4KB