d364cabd28e505ed7876e1fb79b437f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d364cabd28e505ed7876e1fb79b437f1_JaffaCakes118
Size

59KB
MD5

d364cabd28e505ed7876e1fb79b437f1
SHA1

c6d636f5a5e537128d35ba5e8345e2921de09d5f
SHA256

56254d628ee8a881c3d605b4a867c72a9bcc99c89cab3a6ebfade1218979ecc7
SHA512

7ab296ac1e82a42f0cabff2f64a757f3e4c8a5eff2392946dcfc52ee2ee9f8096f64187a743a47fcdef1d1835a0b398f805fde0227f468353bb4c5eeca5bbe6c
SSDEEP

1536:PInxL2EEUZh34+yr0L7Y1X+QlqJfTXcEvbQheWyKH:kxG+E0L7Yd+8wdDgekH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d364cabd28e505ed7876e1fb79b437f1_JaffaCakes118

Files

d364cabd28e505ed7876e1fb79b437f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77fd30a262ab0de72a63d016d1db9519

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord557
ord665
ord595
ord596
ord598
ord520
ord521
ord522
ord523
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord530
ord717
ord533
ord534
ProcCallEngine
ord536
ord537
ord644
ord645
ord648
ord570
ord572
ord576
ord578
ord685
ord100
ord687
ord613
ord540
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ