409830097a24f865fe8b6be1dfa08170_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409830097a24f865fe8b6be1dfa08170_JaffaCakes118
Size

77KB
MD5

409830097a24f865fe8b6be1dfa08170
SHA1

3f89fe77f60069bfa9ab012ad568ff2c86c8bb73
SHA256

300333fa8e6a8ba8c4d0a98aa8ce02ac984bbd501417b0660b3acfd44d587a2b
SHA512

d82ad97c33e99f7241b829bbc72a3d7a17de7b77fc0454d45d7bcab0ceef3fd50860c94beadedcf93303f78ca058cb9175517857ea1cfbe953f890a0adebd2b2
SSDEEP

1536:7Rfzj8PHhP2LABbDVnDrSrSGSwAt3h0GZSRAinQuSlLkuRiqjD:7Rfzj8v+AFDRDgAt3h0GSaiQZzvD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409830097a24f865fe8b6be1dfa08170_JaffaCakes118

Files

409830097a24f865fe8b6be1dfa08170_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c9023363f6c27ec76f14e632c140822

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord595
ord520
ord709
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord537
ord644
ord681
ord100
ord579
ord616
ord618
ord619

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrca
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.rsrcb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA