3079aeab13efad9c613e91569abbaf44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3079aeab13efad9c613e91569abbaf44_JaffaCakes118
Size

48KB
MD5

3079aeab13efad9c613e91569abbaf44
SHA1

ac30aad60287bacfc8a84c08b5d7a92e75a120fb
SHA256

ac8a130282120b8cc8632b82961eed3d39a569a034188cba09f9f2c826a9c45a
SHA512

cb0c8a63de96601c40a3706b084a6c99d8a8c76e07c9d46dee13192bc11e00a79f05b3e0c0407a936e8821c683a823cc35afc4b51a01f234b36d1c7ad5dacc18
SSDEEP

768:e1evG73G31PxzEt/jYNyXV/V0SK31cvG7332:zvGTG31dEt/jYoF1K31cvGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3079aeab13efad9c613e91569abbaf44_JaffaCakes118

Files

3079aeab13efad9c613e91569abbaf44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56c61e49ca95d816ad2fcb5e4fed8791

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord520
ord631
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord716
ord537
ord685
ord100
ord689
ord612
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ