d5c91d7dc35cf004cf64ac1312457bd6_JaffaCakes118 | Triage

Sharing

General

Target

d5c91d7dc35cf004cf64ac1312457bd6_JaffaCakes118
Size

124KB
MD5

d5c91d7dc35cf004cf64ac1312457bd6
SHA1

2073a108bd4e37dfbde3e6196c837a6dc3dee13c
SHA256

b5b997745d4aaae5e2d1dab97ee46f2f24982d05d604ac439cc5cfc8914f2c05
SHA512

49885dafc933e3dd61f5a462a1d37ecefc95d61f3a8c34615a8bb84b9c12ab0a20e45a0dd4a6b0becad6b9b20f218dc396c7d701b653fe41d482d72f91cb079f
SSDEEP

768:QwbZ25x1aLndjcAN6ey7q3cWaDdDKxJcPlDOHC3T3IwdJDQS:tbZ25r4JtT5etO8YWDQS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c91d7dc35cf004cf64ac1312457bd6_JaffaCakes118

Files

d5c91d7dc35cf004cf64ac1312457bd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81ab4dd9ea03f36e3ff892cbc2060383

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.7data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE