ff490f117fe504e36141aa1f0eaa6f2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff490f117fe504e36141aa1f0eaa6f2d_JaffaCakes118
Size

720KB
MD5

ff490f117fe504e36141aa1f0eaa6f2d
SHA1

a4f4526da598505a03bad1a21b527c9afd647665
SHA256

c0ee99c164461c968fbbd93f7d407cd0eee5c4216e4ccab0e00bfe006f95a002
SHA512

78d0fe80944f67404bab8974e79199c238d52b15c8222e4df3b2e4366d517bf20dfd0599ad5da0948ea137c603cf59c471b53b4661421e0ce51509447253aa61
SSDEEP

3072:a/Md5WXpYI+538b8Hpd3cN+UQTvK96iCAn+hQn2ThLUcDkNQXHXgM1YS86X:azo1P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff490f117fe504e36141aa1f0eaa6f2d_JaffaCakes118

Files

ff490f117fe504e36141aa1f0eaa6f2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49fc08656f9ffcf7a0fc294258ef56bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 684KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ