db0053a0bfe0bd0e2bfe0710baae34e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db0053a0bfe0bd0e2bfe0710baae34e4_JaffaCakes118
Size

260KB
MD5

db0053a0bfe0bd0e2bfe0710baae34e4
SHA1

e0bbf22e9f8f3e1c7b83e551b65309aaad158e18
SHA256

d9429851cfaa9bee4b6d29fec55f3449c278df21550efcd410f3dbf1f2b277e8
SHA512

f280925567e3d9e6c7ea8222b6920eb9a7281f93284260ec09aafc63bf18972fb87da8d7b4ca488dd7a81884852952f46673ddfed1f0e0e6ea20c8cd275e575d
SSDEEP

1536:MMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wmOiFL5OMc:fX0e1FB/DpKjCLHAmOiqNKMyP6mQOC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db0053a0bfe0bd0e2bfe0710baae34e4_JaffaCakes118

Files

db0053a0bfe0bd0e2bfe0710baae34e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

856a7bea5a8efcfe3969d3ba5ef425de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord631
ord709
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord537
ord685
ord100
ord616
ord581

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ