f0502c8e7916df663fe67c8d3d563bb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0502c8e7916df663fe67c8d3d563bb8_JaffaCakes118
Size

32KB
MD5

f0502c8e7916df663fe67c8d3d563bb8
SHA1

600b6795a43da378312a4dad34858915670cc347
SHA256

87f7a2b7bfe2e6fab83ae9dd059287f44630984a3c874343494abdd0abd37e0d
SHA512

3b7a141c4a7f8fa762a5281b5d9382c9fc5abc5fd80c57a70b3160d31f854eb13545d63e73a5360e280f328b98e09cfc36e2cf84f24a515a6fdbe47b9e24edc2
SSDEEP

384:hGoky9/MGXUXIR3gR9fe5MUIWAyJwaaHtD:Nky9/jSy3ide5M1/xaaHJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0502c8e7916df663fe67c8d3d563bb8_JaffaCakes118

Files

f0502c8e7916df663fe67c8d3d563bb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93864691d1e061e0350ac54c3bd16580

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord303
ord309
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord716
ord717
ProcCallEngine
ord645
ord573
ord100
ord617
ord650

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ