cfc5759ef1af8bc3f7c3d2004fd0de58_JaffaCakes118 | Triage

Sharing

General

Target

cfc5759ef1af8bc3f7c3d2004fd0de58_JaffaCakes118
Size

204KB
MD5

cfc5759ef1af8bc3f7c3d2004fd0de58
SHA1

0378fef84e0494127bf60110ccc615a4cbf9fa86
SHA256

43ade0732b103beef40c9c65dfe7854c5b29ff274fc8d5bfe954a2564f4d6396
SHA512

8ef01ed32f77441d0a7f78b1e48e0027b2931a95091283915dcaf9b60e7c6f319dfb2f166d8947e3a3f699bbd4e725665954f482e0870a0e2aab904243b091c8
SSDEEP

3072:oGd/bJ5GnnWxnQqc5eYHRMfP8yEbsc6qfPrjyUf16h8L:ou/NPxQquRMfkNbsc6qbjhf1UE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfc5759ef1af8bc3f7c3d2004fd0de58_JaffaCakes118

Files

cfc5759ef1af8bc3f7c3d2004fd0de58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff1e6a8049e4c119aa16a4bb02a0115f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
ord585
ord586
ord588
ord695
ord698
MethCallEngine
ord517
ord628
ord629
ord666
ord591
ord523
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord672
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord712
ord713
ord714
ord609
ord717
ord538
ord646
ord539
ord647
ord571
ord100
ord687
ord610
ord613
ord614
ord540
ord650
ord651
ord544
ord546

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ