40570f6961ff56ed1a6cdb59abe6d28b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40570f6961ff56ed1a6cdb59abe6d28b_JaffaCakes118
Size

16KB
MD5

40570f6961ff56ed1a6cdb59abe6d28b
SHA1

fa62344a66bc07de5a1c6f77033652ed97b7b240
SHA256

53f58701a62bd5c8da877bd34feaed70686af8141a15cee4a34ccc98a359893d
SHA512

edbe1e9bd8b9b9b9630d2b0626a4f7aded2df81e8c56a9002c1a1d84283fe78739d59a85a9e74fe298acbfa94306ed116d4c46cd52610252c4d1b09fffad5d65
SSDEEP

96:yuHEJ7sSjA7y1qxQwLAcSep9CJy8V+XUqI4WkGfQ1tDe2GT4h2:PEJ76W1w9N1I4WJIrgT4h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40570f6961ff56ed1a6cdb59abe6d28b_JaffaCakes118

Files

40570f6961ff56ed1a6cdb59abe6d28b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c907465c3e67b1372df1c4b0eeb3433e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord717
ord576
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ