53bb609d658f3c58182ef7ce8edded91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53bb609d658f3c58182ef7ce8edded91_JaffaCakes118
Size

20KB
MD5

53bb609d658f3c58182ef7ce8edded91
SHA1

940afee5315434b69cb53684d68aeccd9ec17d08
SHA256

189bd098e95a282344d432f6163c710947a34f665065e54973e1dab0c0a7dc67
SHA512

fe3c00181e4389081547c6fb8267be556e102f5bade68c321b34dfe7952a97b512b54dc4cdc279f722f4d8902f25e21827171c4c10d58c0c17eefb5b824e0200
SSDEEP

192:CfCeGnuVUfEa40jxHpSQhBhYoZw9eWeI:CfCeGngUs10VHEQhBhYoZw9eWeI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53bb609d658f3c58182ef7ce8edded91_JaffaCakes118

Files

53bb609d658f3c58182ef7ce8edded91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de3e8286fe5ce41e145e782e1b77f6a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ProcCallEngine
ord644
ord572
ord100
ord618

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ