bf364ee6653a9dd3b5d425adaf48a123_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf364ee6653a9dd3b5d425adaf48a123_JaffaCakes118
Size

67KB
MD5

bf364ee6653a9dd3b5d425adaf48a123
SHA1

accc64d72959a0ef3ca3e2e2d102ddfadffcfac4
SHA256

c813d5c3e6268d42f2344949a8bb81c312d478ce68493530a256967ec48025ca
SHA512

9c0834e9e306427af2a4e688bbf2d24970196ca7d64e0edad62a7649432c8a1fd4c0b4b794bc362b359ee206dd87dc1eb19cd9b3faa52c7281c56629ad09cc33
SSDEEP

768:ovgXo3582KcrEVIt+zZ/03nnZfLylyG3qXEoWTb4cQHFtg0L830TPs+:ovgYJ8cZ8yG3iEoWTb4cQHFtg0oEY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf364ee6653a9dd3b5d425adaf48a123_JaffaCakes118

Files

bf364ee6653a9dd3b5d425adaf48a123_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fd6b9dab5cd17ff8f16fc0e5b4c1b92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord685
ord100
ord619
ord581

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE