2451666b440a4a5cb4d71ebcf0c13602_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2451666b440a4a5cb4d71ebcf0c13602_JaffaCakes118
Size

72KB
MD5

2451666b440a4a5cb4d71ebcf0c13602
SHA1

539343a843969086592c5c51b593ef1c3fa98ea0
SHA256

a4c299fe4cca5ccdbc7133e61d404a8bc4c1ae27742ee57c2fccc4678af01aec
SHA512

c657955cf828e2de67ccb9c171604384992c3d2ead7a5674f4717e2b228f1fe022a8e2d2d043ee188491c6194396b1a8ca9b14a3fe96c3395f4a195bf0a063d0
SSDEEP

768:2kFw1owYOWJOaoI3dM6XfL4hvVet39Oty/N/X+YVhP5itZfP6v+XyeR:RFw1owcRfIgtNEmNfP8Sv+7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2451666b440a4a5cb4d71ebcf0c13602_JaffaCakes118

Files

2451666b440a4a5cb4d71ebcf0c13602_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39041a41cfd9a478e2830bce7808a5e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
MethCallEngine
ord517
ord518
ord666
ord593
ord594
ord520
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord542
ord580

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE