beb676c478818278cc87f578f1cc88d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beb676c478818278cc87f578f1cc88d6_JaffaCakes118
Size

292KB
MD5

beb676c478818278cc87f578f1cc88d6
SHA1

b76d52407cb41b274228379a917a9d0909ac4760
SHA256

92acd0eeed9e2ab8c71d4c99faa620741ce145e607c0b6e6e7ee19659a11a5a8
SHA512

91f5e9f852cf5ce572a8b9fa64dd8ec4f2e839a33258c55b158e173118531276b717b36e34adf6ae9cd277c71ba792b894bb8f1ed7fea3dfd626b6c7214f9360
SSDEEP

3072:yjobicvNyopVpCV0dCvsBpID5n+nJNqRhnuNqRN9zQkLkjgqTCkigqTNFmFnNIW0:yjlcvNyoJCGCvsBpIe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beb676c478818278cc87f578f1cc88d6_JaffaCakes118

Files

beb676c478818278cc87f578f1cc88d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4870b2a06b34732f77b9dfc07e9b0b7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord593
ord594
ord595
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord572
ord573
ord681
ord578
ord685
ord100
ord581

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ