540866ca1621d2bb0087a4577ab088c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

540866ca1621d2bb0087a4577ab088c0_JaffaCakes118
Size

64KB
MD5

540866ca1621d2bb0087a4577ab088c0
SHA1

dd809b7bd2849125cf299c1cf3fdd2947b2bbaf5
SHA256

e516db32c317855808a79cef06e8871de8613006312e4b12e9acdc545d8f8031
SHA512

2e44f02e0bcdeda7e51f155a7b281cc88d8b92951134138c0e6fbf0158122151fc55dfb6c5bad2ad6ea46f23d9f2e319d3c891edffe14a82b87c846b9399080e
SSDEEP

768:QZXtV+2p5dk927t7zfaaXukpZMPrrNbKg1QdMiuc6bdU:o9IH27t3cDR2juc6bdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
540866ca1621d2bb0087a4577ab088c0_JaffaCakes118

Files

540866ca1621d2bb0087a4577ab088c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e50e8576db1d6b7032e43d780f368da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord187
ord693
MethCallEngine
ord516
ord518
ord626
ord593
ord594
ord595
ord596
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord717
ProcCallEngine
ord535
ord644
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ