f55bac0bd97d867a60c324211ef801d6_JaffaCakes118 | Triage

Sharing

General

Target

f55bac0bd97d867a60c324211ef801d6_JaffaCakes118
Size

84KB
MD5

f55bac0bd97d867a60c324211ef801d6
SHA1

9dc8ebf66caa255469742795746b057739ea0330
SHA256

187db9d873d4a6c92fb6c9c58f90dd1a064a28a384b2d9df13737231e2092c45
SHA512

6971bc4abe842063eb4cc7d96e94552e8a727b83e62af1806be4be08e6292fbb4adf182a748941cc5b583d9be39c44a53b274317ecdc33b5ca8dde0b587e1ee3
SSDEEP

768:T9Nr9CW6PDKWQ5edRxCXYm9f9ln9qh9YJP93rvuACDMD/fx6zfPCqKRv19:Tb9CW8DKWqedRxCXYmxT2MPB2xKRv1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f55bac0bd97d867a60c324211ef801d6_JaffaCakes118

Files

f55bac0bd97d867a60c324211ef801d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e831d3057ca47825b47ab9c690f5f634

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord300
ord595
ord596
ord598
ord306
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord100

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ