c058f22a95ce2349f9f309dc025ab048_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c058f22a95ce2349f9f309dc025ab048_JaffaCakes118
Size

220KB
MD5

c058f22a95ce2349f9f309dc025ab048
SHA1

15fd918792872a9f81297bec792ed70d851474e4
SHA256

5a5fd026ef434e1c2a1be51bc2ace5128f62f79e8707af973c36c71e6780b65e
SHA512

aff9e61d3898033e2245e7648b03e31acf09634565ea0c8de981b81704d4b3f54755d72d414dd4d0ce4e6a5210f7168b7b2c684b7112edfa670373306786d20e
SSDEEP

1536:d66SlXFXSXMZJ+0kUVOBtrdtuJ33jfrrtgu9gWU8FXtyUZJ+0kUVOBtpXwX6X:Yl1CqRVm233jDxJKWUa1RVmpAq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c058f22a95ce2349f9f309dc025ab048_JaffaCakes118

Files

c058f22a95ce2349f9f309dc025ab048_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53db4181a237c1e486d49a0076647b89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord660
ord593
ord598
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ProcCallEngine
ord535
ord537
ord645
ord570
ord648
ord573
ord576
ord578
ord685
ord100
ord689
ord616
ord617
ord618
ord619
ord580
ord581

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ