bf3e05642c894ed3485693b15cae15a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3e05642c894ed3485693b15cae15a1_JaffaCakes118
Size

264KB
MD5

bf3e05642c894ed3485693b15cae15a1
SHA1

ad9aceb8679b28fdcd3dabba3d7f897196ec7ab7
SHA256

9f83d4dc10b32fa51450b40ff8a2314c190178398b5a47c6f07f80c99a687b4b
SHA512

0f2aa011bedd579cc463e3dcd833a028f8f02c13d3fdb9635e07b20692864334c8c6e93978d0487b848621c3180caea3845559cf879335e020336e15f18e64bd
SSDEEP

384:ZqQR5Z+TmeMN3KH+R70BY6WO7dPao+TNyqZChsalVvXD/NGmsnENHCsO2wcqgCJa:oQ5+xHyzz29kQi7TZYrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3e05642c894ed3485693b15cae15a1_JaffaCakes118

Files

bf3e05642c894ed3485693b15cae15a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e72cfaa364093bc23d7a06f21341522e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord518
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord578
ord100
ord617
ord619
ord581

Sections

.text
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ