bed6f52e78fb4d91008c2395eb124737_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed6f52e78fb4d91008c2395eb124737_JaffaCakes118
Size

28KB
MD5

bed6f52e78fb4d91008c2395eb124737
SHA1

4083dc8de380f128f47e471d392e38c6c3f13db4
SHA256

97ddf1e5dea6796232dcbba4a5cad52bc553b9a449ebd6f439506275efce2384
SHA512

de9628000024c946966af3ddd3951b850fddee9402c7a058eb48bf71769b5790be818446ba7ba514b97276ded13fa16b253e4a8b5534faa4c80d885b13f85c21
SSDEEP

384:iTk5EzS1V9kWroB3XOld4eTXXO0IXUVXXY5XXEWUuPwM:REmDkWQ8C0tyGWRw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed6f52e78fb4d91008c2395eb124737_JaffaCakes118

Files

bed6f52e78fb4d91008c2395eb124737_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e732d8bf3a40474850a199450b24dd95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ