bc311c891536968aa247d86fedf5f4b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc311c891536968aa247d86fedf5f4b8_JaffaCakes118
Size

88KB
MD5

bc311c891536968aa247d86fedf5f4b8
SHA1

95f18d1178fe1a07354d4ed1e76d0c60d8666cc7
SHA256

dbd237de9af430df08ef49c2d24a50b904bac3c56fae2cbc9a5723f59b7c55eb
SHA512

59bfe67e9cb7416f0dd7883e217d1e0bbb065b05fb5fb2db6439b443b8288e7e0188d3c85a0b063b0de7f96fc6966cb5a6ac2deb037d19b8e6e9c839cc772eba
SSDEEP

1536:wg9VZc83FiuatP+AG+2umeWO2+FPv/QPr20o8UhDocjlD:93FiuTL60o8ulD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc311c891536968aa247d86fedf5f4b8_JaffaCakes118

Files

bc311c891536968aa247d86fedf5f4b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a5a52b492a0c83650169112159980f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord667
ord598
ord520
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord571
ord572
ord681
ord685
ord100
ord579
ord616
ord617
ord619
ord650
ord546
ord581

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ