0023b49e29af780bb917b34cd38e7e48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0023b49e29af780bb917b34cd38e7e48_JaffaCakes118
Size

76KB
MD5

0023b49e29af780bb917b34cd38e7e48
SHA1

0a89fc8f9cc058939a9e9f7c4481d4c6caf6485f
SHA256

41a63255c27598d3fa4c3067eb61f83a941f08d587fdc4fa2a3f72238e3b16ba
SHA512

cdfdd746640a83a2dbb60a19a2f49e2477324f8384d4d9eafffb64bfc5fae7a4025bf3129160266d284c6eadd43307d44c8e307519ba943c46eb08ed59057abc
SSDEEP

1536:tjaE0g6kdJDVPe0/mxEaHW4HKTpKsUTjlCfghD:tN0gNdJDVPN6lqpKs+s2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0023b49e29af780bb917b34cd38e7e48_JaffaCakes118

Files

0023b49e29af780bb917b34cd38e7e48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58cab1e1a0708df749cfb9ccacb1c27a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord666
ord593
ord594
ord520
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord687
ord616
ord618
ord580

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ