f56e65768e6d8a29daed675a247cc449_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f56e65768e6d8a29daed675a247cc449_JaffaCakes118
Size

204KB
MD5

f56e65768e6d8a29daed675a247cc449
SHA1

4652ea6e77df2e6bfdf7b59d3c4231c7a70aff8f
SHA256

fe92b693af1ddc5ba6f593cdcc8368e71d2cc73b5db5b358504381a96d574e46
SHA512

5b17bf9965a50b195655d7298524f9ddf47365772cd59f35bafaf067d680fe946486858c0b627bd465e881fdce03a1833e94570fb7e16970a5e33a51d694f4b0
SSDEEP

3072:ttcVh64Fi5vVsTT/z1VdrbBm7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfr:tMFi92MNkVsuaRaU6mHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f56e65768e6d8a29daed675a247cc449_JaffaCakes118

Files

f56e65768e6d8a29daed675a247cc449_JaffaCakes118
.exe windows:4 windows x86 arch:x86

beaa420846662dce9aa9b5c4988958bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord558
ord666
ord667
ord593
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord648
ord573
ord576
ord685
ord100
ord689
ord616
ord617
ord619
ord581

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ