41016d94b631dc720365a24c3cd8d445_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41016d94b631dc720365a24c3cd8d445_JaffaCakes118
Size

92KB
MD5

41016d94b631dc720365a24c3cd8d445
SHA1

5057a817dfaef7a8eea143e760a3bcafe387c59a
SHA256

0e2096e0886fa07597d4d73303f77216ed5e333233172b67f0c974a96ba14050
SHA512

f9ad7d65b9f6e0e9f7c9c9e62457b85970d7f5ecc92be36f367f80ddc9d5a4d419bfc90537857af407f44b7bcb36b884a9270b7c24c02bc2689457f3b42f3635
SSDEEP

1536:lgK17r2iCYBlzm1mtv+AbMm07F1VoEYIj9WpJVYdlPE0kJeD8Wp:lPPdHfq1mtmmMP7SEYIj9mJVYdlM0cen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41016d94b631dc720365a24c3cd8d445_JaffaCakes118

Files

41016d94b631dc720365a24c3cd8d445_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ