04a5e14bfb6cc3b30b03ea096b6e36f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a5e14bfb6cc3b30b03ea096b6e36f9_JaffaCakes118
Size

12KB
MD5

04a5e14bfb6cc3b30b03ea096b6e36f9
SHA1

e1b0df6899660213586059a9b7af00f61518bf9f
SHA256

c1136cb492b71d286b521b88558ee9acb537273255d0990cd4d8d899c67f493f
SHA512

95eec850c7cc2bb0c176206d27a3aec7659c444e48920d02496d9ed8fbcaa97b31d224a6e4f0db4c9aa23ce88ee665628c2e51829b9fd20f0279476c6c2d4cce
SSDEEP

48:ygCRXbm26O4AonUiFiosZKrue4A/oglwR0EfK2Ug:iR36O4Bue4T0Ei2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a5e14bfb6cc3b30b03ea096b6e36f9_JaffaCakes118

Files

04a5e14bfb6cc3b30b03ea096b6e36f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bad91fed9dab58de0ae1f264dc5a5268

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ