5202c068c75dec68ad5ec385a3b8a681_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5202c068c75dec68ad5ec385a3b8a681_JaffaCakes118
Size

68KB
MD5

5202c068c75dec68ad5ec385a3b8a681
SHA1

d8693b67d66f6296782ad478f570d0ea54915b97
SHA256

ba5490e27e386becf5b3ec4f5b45b873d6ed8cb62c0cee9be4c75852cb07477a
SHA512

bc6ee4fc86a692e4454159656f9ce01b63023d057268d1caeba64587d0227d7588ea820087dd5593d55288ced78d9d55eaea89417ef1119afadb769db3346d66
SSDEEP

768:uqMLoTC35MDL1z5vJotttttttniruSZZaYhuoglhM:XMLoTCpkz5vJotttttttnnNs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5202c068c75dec68ad5ec385a3b8a681_JaffaCakes118

Files

5202c068c75dec68ad5ec385a3b8a681_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f685bc176a0219e9f41b6b641ff6c317

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord619
ord581

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_0
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE