f5f69eea97d2d4e954a9e39e0a9e13fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f69eea97d2d4e954a9e39e0a9e13fb_JaffaCakes118
Size

736KB
MD5

f5f69eea97d2d4e954a9e39e0a9e13fb
SHA1

343188cfc80aa85031f540d0d724948ddfb8dc10
SHA256

983c73873bfb4b9ebd39fe8859cdbd773d340576facee3f552a4569a7e6016ce
SHA512

745c9bd036341d24a6d4f1126b6bba409c5aca67f2ecb31e5330834146d5529d014e60f2010b8b6ea21896cb21128c4cecc2aa3c430b030500931fe7d2cc246e
SSDEEP

3072:m5w0BQAR1L+3Q4oAO+NlnZIne+bPSG/5SzRtuRajpAvktGmOj4D9RKtTOUzArRSP:m7QUlpV8H/UhN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f69eea97d2d4e954a9e39e0a9e13fb_JaffaCakes118

Files

f5f69eea97d2d4e954a9e39e0a9e13fb_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

f9a7cf53416ec98eea90280c5d88244e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

MethCallEngine
ord631
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord644
ord537
ord101
ord102
ord103
ord104
ord105
ord616

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ