bdcea33de16abca98e465a1b62817b25_JaffaCakes118 | Triage

Sharing

General

Target

bdcea33de16abca98e465a1b62817b25_JaffaCakes118
Size

62KB
MD5

bdcea33de16abca98e465a1b62817b25
SHA1

1e2a982e8a2fa4e640002e9166c38c5d7e42c2e8
SHA256

c46fd83cb7bfac986e5f5a139ef1705e1cfdecadbb4c9a0d29eb27b91eb48ed3
SHA512

cd1314b33199f6abe34b2fc48a7501f3e55145c55516330b9c1e04a1cf141dd090256ae7c9b0b454657432de00c7d1dfb847052c302b2f35a1bd5e9dfb402620
SSDEEP

1536:5oEcaDRBGdenCbG5fjDaNGvYPvPt1H7kKA:5o2DbGgCbubONG+vPt57Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdcea33de16abca98e465a1b62817b25_JaffaCakes118

Files

bdcea33de16abca98e465a1b62817b25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c01c583656fa253a00c05b381d928006

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ