42e878cab5bf096e02b75d903a1ebd5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e878cab5bf096e02b75d903a1ebd5f_JaffaCakes118
Size

120KB
MD5

42e878cab5bf096e02b75d903a1ebd5f
SHA1

25306c0f650a4642fd514c61a2a659f83f764b2d
SHA256

06d910e43f2c2f71dfa2d41b7a2dcbfd294cadeb4dc3161c04dec416cac9aee8
SHA512

9a1b6253e5445c109cd70a7a9769fb8e1d85d859701f4440948fcd3fa14176b62cfa02efef9f393cf80d153c04ed1f94a7fc8bd678c222fb3acaf02a9c872eb4
SSDEEP

1536:uYUO+dsw5cx4xA7g+EZAKpxzOgSuOBybuiSr:f+4EAs+EZAKzzOLrwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e878cab5bf096e02b75d903a1ebd5f_JaffaCakes118

Files

42e878cab5bf096e02b75d903a1ebd5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a079b7925f31d75089fa536edbb95de7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord573
ord100
ord617
ord619

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ