0103e48d9db7d21dcbeee0ff8426be68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0103e48d9db7d21dcbeee0ff8426be68_JaffaCakes118
Size

168KB
MD5

0103e48d9db7d21dcbeee0ff8426be68
SHA1

616cb886c4fb0ecbc12adfa8244db8d67012c18d
SHA256

e202b46c23168c7b51c431929247bf7e07c523fea154140141e085a05ac7f529
SHA512

684c7204393d4610aa60cffbc68148110577d119dfcd25e4560fe8def6e33ebe8a14f3931e817e8dfb489edf4a38e17250c4fdd23e41b20e30068e8472a14a0d
SSDEEP

3072:cFBUKloQSrkKgRENEI5apGTwQqVMTW0hiJDear611KlUNQs:j1WgQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0103e48d9db7d21dcbeee0ff8426be68_JaffaCakes118

Files

0103e48d9db7d21dcbeee0ff8426be68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b2ee9e8d9c837208433f1c769c736ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ