f5fa488a9870fe7961d20b5a9e603446_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5fa488a9870fe7961d20b5a9e603446_JaffaCakes118
Size

20KB
MD5

f5fa488a9870fe7961d20b5a9e603446
SHA1

2e8958cc63d0c4ead99106cc521817ffb712382b
SHA256

cfb6c2e1bff55ec6782c6a6a23786ae8071bf7a223e907da0f1a38157f99bb7e
SHA512

df9ad71a4d109216e4993f459703919a3f4c2711fc39ef6fdb20b4239d845a16dde315a4924ec3e8c453e354ba4ad4c6d3ffb4f63fcd1b90907cf15016540d4d
SSDEEP

192:yK+Is6TPGUhFw9IhBejAFeFkbjbjC3xOd/R44yieI:yXqOEFw9Ih7YwjC3x8NLeI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5fa488a9870fe7961d20b5a9e603446_JaffaCakes118

Files

f5fa488a9870fe7961d20b5a9e603446_JaffaCakes118
.exe windows:4 windows x86 arch:x86

049dd5757304de980727bd927a623545

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord537
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ