JaffaCakes118_5b9631be2bb7ecccc3176d22206d887a | Triage

Sharing

General

Target

JaffaCakes118_5b9631be2bb7ecccc3176d22206d887a
Size

132KB
MD5

5b9631be2bb7ecccc3176d22206d887a
SHA1

514676489ea5556aaf4f40e115b7ba810a351029
SHA256

dd284168155ae820d4754d366c9adab64c3b8f15bb7c5fa1de3a762d0314047c
SHA512

854b5c2825f941098734239b802c0322533e4414ba4e89f338d0c0867c0b202930e29f0c99b401d66c0a101cefd03eb6276bf82832140e9c5137655db5b0df22
SSDEEP

1536:eHfA6wKBZbryh0Vttv+7MZ8cyu90AjZF:+I4tvKRAjf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_5b9631be2bb7ecccc3176d22206d887a

Files

JaffaCakes118_5b9631be2bb7ecccc3176d22206d887a
.exe windows:4 windows x86 arch:x86

d36c54a1791ea6cb9cd4621059a62af2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord717
ProcCallEngine
ord644
ord100
ord617

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ