bf275fdc14136be462fe9b87dd4d8e17_JaffaCakes118 | Triage

Sharing

General

Target

bf275fdc14136be462fe9b87dd4d8e17_JaffaCakes118
Size

116KB
MD5

bf275fdc14136be462fe9b87dd4d8e17
SHA1

7a76dbb2d29ce77ff6a8a6e94b88698d7b7774f2
SHA256

1fc2d744dc5613b1339404265868d970b96ca5ebe745631f36590ec8966ac251
SHA512

5afea9abc8f627a49a328571b4ee44c1f4c4eeb131c5b5819939f3a2746b2abce4a62d6cddfa4d1eb05efd50662c7399be4c2d1c413dcb781c94dfc3d264c94a
SSDEEP

3072:AmVIgdtzuONY4pK7iJ7FaQX9gAwgzlyrZ9b7:AqdtSONvBDtgANMT3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf275fdc14136be462fe9b87dd4d8e17_JaffaCakes118

Files

bf275fdc14136be462fe9b87dd4d8e17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b903248dec9ec4fab30657a0d572d7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord616
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Inde
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE