0050b066ce9fbba9a5e7afb1980689a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0050b066ce9fbba9a5e7afb1980689a3_JaffaCakes118
Size

115KB
MD5

0050b066ce9fbba9a5e7afb1980689a3
SHA1

9d24ff398a9ea548474c1d5d63edd6a3202e04d7
SHA256

ca1c1dbc2618d88d2b71ab0bf1bb406071515118848acf2eca922db322c694fc
SHA512

87fba1e82ce5e90fb439a12244cbbb1f6fb6a6cedcede8e625d71f68edbb7316a853e3cca3f64c026b6d588f5a4f84640d0350fe921a0edf3fd466e68cd2df9a
SSDEEP

3072:ZlsicigRsNqrHanmsoZX+7Ei1UzPTE30slWimz:KigRzrHanBoZuL0TQ0+mz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0050b066ce9fbba9a5e7afb1980689a3_JaffaCakes118

Files

0050b066ce9fbba9a5e7afb1980689a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5bfdb4c23b9e9d3ee09fb46749ee711

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_0
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE