11bf919af2e8d516497574f8d35c10a8_JaffaCakes118 | Triage

Sharing

General

Target

11bf919af2e8d516497574f8d35c10a8_JaffaCakes118
Size

24KB
MD5

11bf919af2e8d516497574f8d35c10a8
SHA1

8d2170b6483061adda15463b22d4a4c8fe958786
SHA256

bc76307b3529a4bef6c86640fc998f1f9557ef2de78b88ecf2f5f1c4910f5227
SHA512

df1d1f5e01e5827368cfcd5983d4eaabfeb49914cd57815a0187c705f9027660e91f036bded1e893177c57fcba0d9fac85e24b59c876b94f866e718464da6753
SSDEEP

384:/bBgTtVQ9HBaaspmIjyTP++lumpWEPA3:/NghVcHBJsp7eTP+QDpVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11bf919af2e8d516497574f8d35c10a8_JaffaCakes118

Files

11bf919af2e8d516497574f8d35c10a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0eb4ede05dc6a68bfa050a3925945c6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord519
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ