4f9e7f2b2bddd076b8d129074c2f8ffb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f9e7f2b2bddd076b8d129074c2f8ffb_JaffaCakes118
Size

500KB
MD5

4f9e7f2b2bddd076b8d129074c2f8ffb
SHA1

bf31ef6ee570db00f1bcc72ac05c82d95e1b5d21
SHA256

f95df4a43176939d20e84e9c6284024b5d2d36271e315dea152305609dc1e94c
SHA512

4d467335278aa8c79cf0c3bc68a91ba8394e0ce8465fa7063eb0f155da84f01b9dccbd23c11e33db48a44b7a2c3a7a13df7b96d4d2ddd84ddd49c635ec0ac78d
SSDEEP

6144:oBnrdl6t0sYU9BO4JQb6A/PMpAbdxzLKHAXTrNMTnFGFqZUJ1LRMj+SU0J7khihW:Emt0sYUrqDNbdxsAXvCFGGCCm02hE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f9e7f2b2bddd076b8d129074c2f8ffb_JaffaCakes118

Files

4f9e7f2b2bddd076b8d129074c2f8ffb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1ba45f1a2937a160e77fd288a75ca1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord592
ord703
ord520
ord522
ord525
ord633
EVENT_SINK_AddRef
ord560
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord530
ord648
ord570
ord685
ord100
ord617
ord547

Sections

.text
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ