bff2aaa3d95c54828217902d62c8cbef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff2aaa3d95c54828217902d62c8cbef_JaffaCakes118
Size

24KB
MD5

bff2aaa3d95c54828217902d62c8cbef
SHA1

4bb88837029392971ad85529a2e1b6cc35c5feab
SHA256

009476f23d4eee383a3ffb11a7f5499163abdbbb892fdb3325608a70f2d38efd
SHA512

ab990745c207480f4550f3ddc6d068d032162f434c2d911b1fd1f6a80fff7019e9cb6ca4091871b1bf6c06b0cb321e2900afff89b59c9cb741e868b3186ec4bf
SSDEEP

192:Uutt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:UuttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff2aaa3d95c54828217902d62c8cbef_JaffaCakes118

Files

bff2aaa3d95c54828217902d62c8cbef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ