bcf2049dd3a60bc05de20db846abf4e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf2049dd3a60bc05de20db846abf4e3_JaffaCakes118
Size

1.3MB
MD5

bcf2049dd3a60bc05de20db846abf4e3
SHA1

6bfd2c43438841d8523dbff47ab0dd468dc18e37
SHA256

fd8d13af27c88a1ed58eb17c334e7a55c166cfc1354c82e6c6390810ca3c77d5
SHA512

12ff01670fb4ca03c7da7311cfd084da04e185fdb64786790aad1f7be7cf0ac5aa2e8989f89e38c297b4f8528bcc6e76473bb978b6c389984623d7a95597d4f9
SSDEEP

6144:9mK9S9Y9Nx969JWfCttF3UA3yfGOhbjBGENBCcV:9itCfpV9GEacV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf2049dd3a60bc05de20db846abf4e3_JaffaCakes118

Files

bcf2049dd3a60bc05de20db846abf4e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de066097c2b389f959d71ec398bc636b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord300
ord306
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord570
ord578
ord100

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ