d5684a833cf7a057e4784924696806d7_JaffaCakes118 | Triage

Sharing

General

Target

d5684a833cf7a057e4784924696806d7_JaffaCakes118
Size

280KB
MD5

d5684a833cf7a057e4784924696806d7
SHA1

2668f297074d082a8663c085be2d80e884fd8238
SHA256

cf084f9854383fa08797c998ea67d7e4405684618b976354337b52cfcdf36733
SHA512

c3f9afcbb982a7a43bb48d1a9df57d0abc394c9ba76092bb2dd53f523c241da058e27638417f1f511ae40b6a8bb146be0d9cc1cd4490907baca165e5293a38ba
SSDEEP

384:8iXVIAy+lNKFcMyEZLPrFKFlBY605CdQvo+TI8xZCdzs3MKsm9jjpC53C/+ZnOrY:lXVIA78cZ22YqO91VRJSK1KmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5684a833cf7a057e4784924696806d7_JaffaCakes118

Files

d5684a833cf7a057e4784924696806d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6439ccb892f285ee92ab885871e1dbe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ