41278699e844aeea120cfcc33fc7e603_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41278699e844aeea120cfcc33fc7e603_JaffaCakes118
Size

78KB
MD5

41278699e844aeea120cfcc33fc7e603
SHA1

fe037c22435d33b80485242ea86fc9f07b152b6d
SHA256

a48187d6faafc79820d6c4b6f2b09a48fd9c714b852738129ca38d6652d5071e
SHA512

29a66da1a771f3b5225fe0e1a065204367995a4f9aa3f556a8a4b281920a28806d397bc1d8d0596ac3e86d0f067911ef004a5f848085b20c8a999e885513fa3a
SSDEEP

768:lAoD6c4JAxDm+fcLbR8PuzMr/58XWDO91T+ruHTHC5JL9y76M:R6c/obCPuYL5E91tENGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41278699e844aeea120cfcc33fc7e603_JaffaCakes118

Files

41278699e844aeea120cfcc33fc7e603_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b733f1f2b65539a445e003cbaa19b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ