bc544074b0b220a435f728b32d4a7716_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc544074b0b220a435f728b32d4a7716_JaffaCakes118
Size

760KB
MD5

bc544074b0b220a435f728b32d4a7716
SHA1

e5ede34bd7ce0dc94e97dc8579095a21fb6ba9ec
SHA256

b635d5a61d3a91271ac65ba9f56a34e0d132066c6ccaf6c3008fb21b82358b80
SHA512

d672ba61653c7a232a52dde6a76a79297aa54fbb20d34efe90f9d75112b2e047aa7c7f466064d5024e36aa774a0d211f34f6ce80b0244295005905e43bae023a
SSDEEP

6144:/Bm89yXytgk9yXytgrDvLrDvLyKimnKmn4n+nvnUmnSjDvLk9yXytgIcV:/B5JgvLPvLSvB+vUjvLCAV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc544074b0b220a435f728b32d4a7716_JaffaCakes118

Files

bc544074b0b220a435f728b32d4a7716_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dac2957a6c259a688ebe7c54d322e710

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ProcCallEngine
ord644
ord572
ord100
ord617

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ