55bf65cc8cf1f9b1083be817e891fee2_JaffaCakes118 | Triage

Sharing

General

Target

55bf65cc8cf1f9b1083be817e891fee2_JaffaCakes118
Size

80KB
MD5

55bf65cc8cf1f9b1083be817e891fee2
SHA1

be09c6090262307d440708fc74f1b3ce882d99f4
SHA256

fa356cd27bab7c121f3840799d096b5f9c07be065b6c99131f8c0ec3dc115d47
SHA512

06664381ab8db4416e1d841239661e931bfd8e29c3ce7ff15b3f5b81fe649a670fee7b0b59df8832f965bd3a37e0a7cedbe759351682058b4e5882111552aa92
SSDEEP

768:jZwO3vCN9mM0M42PL3ikXSSRY8l9kORPRVdj15cGROZPHCljRgznzXh/utdLgb3n:jm0PD8SfgfJVdrcl9YvgrH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55bf65cc8cf1f9b1083be817e891fee2_JaffaCakes118

Files

55bf65cc8cf1f9b1083be817e891fee2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d416a0e643938843cb260284de282abe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ord318
ProcCallEngine
ord537
ord644
ord538
ord575
ord685
ord578
ord100
ord613
ord616
ord542

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ