bf23a87150cf64cde02978259111296f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf23a87150cf64cde02978259111296f_JaffaCakes118
Size

496KB
MD5

bf23a87150cf64cde02978259111296f
SHA1

094c6854a0a4fdb4330ba4c1d171a5c93d78d502
SHA256

4083913b110d6fac5206a03b6b01805115e29eecd76828de9256354b64db7bdb
SHA512

3b7e9b58c04b5e907078f816fd31142ac946ff665034f45464a7fe85948497a6bfd02b4a4b718e731b47e5946591f5e704b77b6e3a3cb7ed4f2ab9225885524c
SSDEEP

6144:5fHQ9wwB4ePGTV/HSZhTcVH7ZJyqkhOO:xuws4xyu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf23a87150cf64cde02978259111296f_JaffaCakes118

Files

bf23a87150cf64cde02978259111296f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abc268ce773347ebe459970a17766da1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord518
ord662
ord666
ord593
ord594
ord595
ord598
ord520
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord714
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord647
ord571
ord573
ord681
ord685
ord100
ord612
ord614
ord616
ord617
ord618
ord619
ord546
ord581

Sections

.text
Size: 488KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ