40d542a72afa3c02b2c31d93ba54aabb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40d542a72afa3c02b2c31d93ba54aabb_JaffaCakes118
Size

36KB
MD5

40d542a72afa3c02b2c31d93ba54aabb
SHA1

84eba105a70e41f65d8e225d54126ad5f6125791
SHA256

c416651f3bc388e465b6b05f2ad3d39ba67f21da0a0e3121e963779b8801b1f5
SHA512

b26415bf8bf142d7f042c7c0a18998e205d342cf13f59ca8c6012f2b22a70cab35b7894f9d67bb1d2763304f4fb7d988613f0256df0b500a5147ea4eba251e7a
SSDEEP

768:qi0QgZNPaWV40sMFFSL/5s06TAfVZjI7Y7GP0:qHplV40sMazIcyc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d542a72afa3c02b2c31d93ba54aabb_JaffaCakes118

Files

40d542a72afa3c02b2c31d93ba54aabb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49ae717f3fbd209b53d745dec9886520

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord715
ProcCallEngine
ord537
ord645
ord571
ord685
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ