045abe0faf0b2909d000d31dfa47c5a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

045abe0faf0b2909d000d31dfa47c5a1_JaffaCakes118
Size

89KB
MD5

045abe0faf0b2909d000d31dfa47c5a1
SHA1

c4922cdc12e1cff3a325752c6ab61c4012519f93
SHA256

51b9bd03e92aff90b3e6b009f230bc9dbdaf5513f0167019bf29d8a0c8a07242
SHA512

33982dcf47ff0f36344c87a0a75d24d37ad469322fbce7fb89e050dceae82ffc3a65e469a070af2bbdefa1934902eae51c47c57bd9eec11a9306c18b15c24c21
SSDEEP

1536:zHpJdNKX2DJrYqQtrX/Y/Lu4l0FeK8/Ku8V3VH7B5uMEVZ2l:FjkX21rYqQBg/1UeKu8pVF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
045abe0faf0b2909d000d31dfa47c5a1_JaffaCakes118

Files

045abe0faf0b2909d000d31dfa47c5a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07d8f39476736eeb8b11203b800e9388

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ