41a9c23adc5cb2ff9e1fbc2c767ec1ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41a9c23adc5cb2ff9e1fbc2c767ec1ef_JaffaCakes118
Size

20KB
MD5

41a9c23adc5cb2ff9e1fbc2c767ec1ef
SHA1

3d28d79bd4013997f844621c10acfb4d76f1a0a6
SHA256

0227d199c463eefe06625188c95d3488b88fcdbe9b01041d9ff1b22886ad9351
SHA512

1384a3ea2d9d24825f4475662cf98912ab02dd203f5c10b179288a6c41ef3b5e2a11f6ade11d201e6f0e674f21e7b78324971dffed89e02924221bd9d20acb9c
SSDEEP

384:b+O/OpOgODK/TTAAAAbT/7iIOpO/OUOP6oYPShG9yoy3hyJmToWUo:3YPSX0E/Uo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41a9c23adc5cb2ff9e1fbc2c767ec1ef_JaffaCakes118

Files

41a9c23adc5cb2ff9e1fbc2c767ec1ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f96801a1374080d697d974dc302e570

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

rtcAnsiValueBstr
rtcLowerCaseVar
rtcDoEvents
rtcMidCharVar
rtcSpaceVar
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
rtcSplit
rtcVarBstrFromAnsi
ProcCallEngine
rtcFileLength
rtcImmediateIf
ThunRTMain
rtcLeftCharBstr
rtcR8ValFromBstr

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE