05785873534c8e492fdc2833c8bda42d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05785873534c8e492fdc2833c8bda42d_JaffaCakes118
Size

1024KB
MD5

05785873534c8e492fdc2833c8bda42d
SHA1

f99e60790c664d7bd0db76ac8197f4cd6ea12d17
SHA256

b20a881bdaeeebfe4f9e0444864fe176c0e41be89ac3076475b0f1bea2f9d495
SHA512

ae47bdd9ad8c35c101db7f1b194cb879f144c39d265a1121aadb2cc1913135ce86714cc716949b52a9b0b8fdea70d22ccfc8b6d51db7bfeb1767ec8ed12b50cc
SSDEEP

12288:la1im8UUdbhEKUaMg2qKIaP5+RjBL2KebMNG9:xmfg2qKIaP5+RjBL2KebME

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05785873534c8e492fdc2833c8bda42d_JaffaCakes118

Files

05785873534c8e492fdc2833c8bda42d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69a45d6f5968cfc89622973d5de02714

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord518
ord519
ord593
ord594
ord595
ord304
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord647
ord572
ord573
ord681
ord100
ord579
ord610
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 956KB - Virtual size: 954KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ