f5960fd468ccac0616df0584c3579ef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5960fd468ccac0616df0584c3579ef9_JaffaCakes118
Size

36KB
MD5

f5960fd468ccac0616df0584c3579ef9
SHA1

191336eb4598010d27b9b7a9632277d25d5f7c00
SHA256

f01352ea31121d3d6fd011138f8686a4c8db8f4868225c49fd6c20e508fd5002
SHA512

9b0ccd9309ea4c6f7b3a6f5077d7c4e3f0eef703f9ff91a2f7328f714c400dcf28dc749da7f68d9d604b456c7606dd664ed55c4a096a815a3f347d8d03454585
SSDEEP

384:m3vbh714HsutRTy5wfPHfHpwZkRadIDjugvtMXDKnSQ7L2m07vmAelbj5sSDfGG6:Ubl14MYP/JwSuglTiNQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5960fd468ccac0616df0584c3579ef9_JaffaCakes118

Files

f5960fd468ccac0616df0584c3579ef9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4dc5b47c34a9f28a467e40ef9acdd141

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord717
ProcCallEngine
ord644
ord645
ord647
ord570
ord681
ord576
ord100
ord617
ord580

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ