04f5e1b527f9223a5fd29d7063ee8132_JaffaCakes118 | Triage

Sharing

General

Target

04f5e1b527f9223a5fd29d7063ee8132_JaffaCakes118
Size

80KB
MD5

04f5e1b527f9223a5fd29d7063ee8132
SHA1

ab1855122d3135619d16281c42840abcce32dea3
SHA256

f54842057eaf8c604121e825f89243a3d8a5f0c959d2b1c9eb0e8c910e3ecbf6
SHA512

bb0054d27dd9c51d416b76d3bc135543c75094f22a6438aaa8cd4d068833e998b619517cb5511678961bc4aa003bd3de4fc24ac25b921db470457e1126e6a20f
SSDEEP

1536:soMnMsSV7k3xWU+Ou9XH/RD03NTkUMs0MW:soMnMdVw3xWU+Ou9XH/RD03VkUMTMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f5e1b527f9223a5fd29d7063ee8132_JaffaCakes118

Files

04f5e1b527f9223a5fd29d7063ee8132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6ee0b9ce08ab974a996c8d039eaefa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord100
ord612

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ