f5af09945df6b5a40e35bd5fb50b1ce7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5af09945df6b5a40e35bd5fb50b1ce7_JaffaCakes118
Size

184KB
MD5

f5af09945df6b5a40e35bd5fb50b1ce7
SHA1

01d407926db9f84443dd3a0fc80f8dfa92582dc3
SHA256

c7799966fc0cdea33b0d1b2d4d82da3b15bebdaac456be51a708928e9c1cf02a
SHA512

4898ce5c99c258664e1d9d3c0ce9a970e4e3aed45969d529d4b29aeb45f4d7bd2cef3b5b12152a6b2de336e1e20a0a69f79f2c64fced84183af0baeefda4295c
SSDEEP

1536:FO3hV6TIb8cnayvLeOeIiOb5neTbRp591b2veTI5nIPhJ+qRlZZbYpP4NxU:F0YI+5In5nG1pz1quI5nAJ+GZapPYU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5af09945df6b5a40e35bd5fb50b1ce7_JaffaCakes118

Files

f5af09945df6b5a40e35bd5fb50b1ce7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49fc08656f9ffcf7a0fc294258ef56bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ