bd2bad3360736f856e3346fdadcd96a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd2bad3360736f856e3346fdadcd96a1_JaffaCakes118
Size

60KB
MD5

bd2bad3360736f856e3346fdadcd96a1
SHA1

d83de8a668557c63c352d9ff432241e5f5b5e306
SHA256

0f667aa95ac8da7b7aad64fa9e809c413dc8c34fe7674b775cb5717b9cace4d9
SHA512

9d219541559eec73c86fb41fbd705b711ad2c5040de2217f942e201ac993d949b807faed7c340c057f610e3e49c4117134bdf88d288f7a0e5eeffb837aa96a0d
SSDEEP

768:V4WAfBhk6hdcFSxirEpO1Hgn+p0eiHgvtwomyEdxsrz/:/IdcFLZp0dsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd2bad3360736f856e3346fdadcd96a1_JaffaCakes118

Files

bd2bad3360736f856e3346fdadcd96a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE