0447f778b272976ba3c15b25992aff20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0447f778b272976ba3c15b25992aff20_JaffaCakes118
Size

16KB
MD5

0447f778b272976ba3c15b25992aff20
SHA1

13aedc507597eec872dc098e4af4e1d9c56f651e
SHA256

7496cf513d964ab39ca558f104ccdea1142853420ef5186dd7f989c5cca24803
SHA512

521034355e36bb87e45df3ca78778ed6b21f88c5681cb6171d84771ac675541730e4642ac822268096d35dcb1dffd5c579a22ea2bece986e21e242307bd4c6d5
SSDEEP

96:FCUP2Q5VPHV/FOKsA3RCy0qaqmioQZ1zCFM3QUarMKyWDSES2:1f/POVknfZwFMjxWmES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0447f778b272976ba3c15b25992aff20_JaffaCakes118

Files

0447f778b272976ba3c15b25992aff20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1003903926a7180bd47951bb0d019a91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ