156ac8b38807948ffb9360901bf7df88_JaffaCakes118 | Triage

Sharing

General

Target

156ac8b38807948ffb9360901bf7df88_JaffaCakes118
Size

64KB
MD5

156ac8b38807948ffb9360901bf7df88
SHA1

c09b3d60bfe7ca792bf5a53f221ec445703a2bca
SHA256

89f185a58755d27a7e073a3efe69a932ff4bc77ca27072696d0c8c554e9c212a
SHA512

b70b41c1679deba441d204e16a2ce36afabaa4f1bf02eb49bfe925b715edc4441ff29f583fe4b787fafc8bfbd82e71ed5e6d785f15dbd2fcc0052355a2a2c128
SSDEEP

768:yZXtV+2p5dk927t7zfaaXukpZMPrrNbKg1QdMiuc6bdU:u9IH27t3cDR2juc6bdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
156ac8b38807948ffb9360901bf7df88_JaffaCakes118

Files

156ac8b38807948ffb9360901bf7df88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e50e8576db1d6b7032e43d780f368da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord187
ord693
MethCallEngine
ord516
ord518
ord626
ord593
ord594
ord595
ord596
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord717
ProcCallEngine
ord535
ord644
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ