bea2e9c0677ad6daa83cc1608f3bf95c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bea2e9c0677ad6daa83cc1608f3bf95c_JaffaCakes118
Size

100KB
MD5

bea2e9c0677ad6daa83cc1608f3bf95c
SHA1

2b0f00a21d1b31df1b603a45eb6b7d3974a8fb09
SHA256

4274629e3865dfa10d5c5f25d8fffebd8a7db55f6f1ca17bd2a3e3e3bcc84bae
SHA512

0bc9522bd6c8e420f3256f0df86e3a0b0df3e79ed56514217ef6b4fc97379a0e5400551d8247acd66ab45fc8be0ddd66fe53a48cdb56108ac75a168cb15b7e93
SSDEEP

1536:BjWhcX220mQ7RxJKIRGWcOUP7vXArnY1ZqAefzyesdNIjnZkk:F5QINAfzye6Cnik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bea2e9c0677ad6daa83cc1608f3bf95c_JaffaCakes118

Files

bea2e9c0677ad6daa83cc1608f3bf95c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9993a71410e148077d8c1b14291428fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord518
ord519
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord578
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ