41da9d87eff2ccf7b2ea096f1981868b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41da9d87eff2ccf7b2ea096f1981868b_JaffaCakes118
Size

36KB
MD5

41da9d87eff2ccf7b2ea096f1981868b
SHA1

f42e443e178dd2e972a7f5b4e3a60b437eda610d
SHA256

54abf88ec5c900fe133fe4d1a110a56c9ef4696b4bb5688cf5f11552c96c2ece
SHA512

79dfae275474047cadb44cc0ffa5e8933ca4d29d0a4296c048764fdbc5d0a734f09e9903a78d0bda80eab86221f247d60021128db7ded97658f3c1b8a0e52fb7
SSDEEP

768:0e0jYg4FQwb8UyB0+UWWp24z6rjoFKrYutOTYq2A:d0jYgagUDt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41da9d87eff2ccf7b2ea096f1981868b_JaffaCakes118

Files

41da9d87eff2ccf7b2ea096f1981868b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bab709d462353166ca51d4deb27073f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord595
ord598
ord631
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord715
ProcCallEngine
ord645
ord571
ord685
ord100
ord617

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ