54856423b4987baa63fbb3927390efee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54856423b4987baa63fbb3927390efee_JaffaCakes118
Size

48KB
MD5

54856423b4987baa63fbb3927390efee
SHA1

124e85c59ddcf40ada09f432219a4e075eea61aa
SHA256

61fc0f3e6affa71e9154862a00fa55dc9a53304dccd1c97169dc9ac924addfc9
SHA512

80867f9a021be0f2c63de94c24eed6f231975840e5aa42f132fe487c6ca7c25f32967dd4ad4f5fcb0ec4c939d94b5ecd27e4c96469f396e4cb7f45e8d7060c32
SSDEEP

384:g3HhJWeY3PpJ+A7B4pOtvq2/MDQF1SecjHH703T:t3PpJ+AypSN/wIT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54856423b4987baa63fbb3927390efee_JaffaCakes118

Files

54856423b4987baa63fbb3927390efee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4065f49de82a57ec8bdc10d902fef0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord667
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord714
ord607
ord608
ProcCallEngine
ord644
ord537
ord570
ord681
ord685
ord578
ord100
ord616
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ