bfe4aabcee56d9ea66622617e6a5fe4b_JaffaCakes118 | Triage

Sharing

General

Target

bfe4aabcee56d9ea66622617e6a5fe4b_JaffaCakes118
Size

120KB
MD5

bfe4aabcee56d9ea66622617e6a5fe4b
SHA1

d42ea0954d9bf83a12a85ad01543a157099de63c
SHA256

0512c8c515096734e33d52d39d554b683466183859b968f3c3fc525be6acd69e
SHA512

e578ba6907d916bb4604c2c68250b624c41f2ece9a07270c79ae3487288eca970ca5cf14f0adc625e1341fac73cebdc3b837daa08877574bc9d848ade65044b3
SSDEEP

1536:wbzdIV2eDCsbvzlJAF4aSeH6iRNKipxXJT4r4580MFO/1aqY990:EZemaIF5OSzTHDME//Y990

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfe4aabcee56d9ea66622617e6a5fe4b_JaffaCakes118

Files

bfe4aabcee56d9ea66622617e6a5fe4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2424c2d841534bf72c3d6f31827a81c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord586
MethCallEngine
ord591
EVENT_SINK_AddRef
DllFunctionCall
ord676
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ProcCallEngine
ord570
ord100
ord613
ord543
ord650
ord546

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ