452c47b9e40241b440fb3771b9f548be_JaffaCakes118 | Triage

Sharing

General

Target

452c47b9e40241b440fb3771b9f548be_JaffaCakes118
Size

99KB
MD5

452c47b9e40241b440fb3771b9f548be
SHA1

128fa359c60a09ea38fc5645d15308d589998fda
SHA256

f63890029e248799be3477bffc4b007b0806a3e19a020ef47507681c290d711c
SHA512

6f3a11fcbbc4a3ca8c8bdebb763cfa80d590d2c1ea148c438a6e3e90b64a66024205624250020d07a4ba3e1773f9f84cc84c16afd25486b000dc19e08af329ec
SSDEEP

3072:r5XMqW+A2aUGSKlA51QVJHj2qxOFi1vb/Op:rOf+FPKQI9j261+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452c47b9e40241b440fb3771b9f548be_JaffaCakes118

Files

452c47b9e40241b440fb3771b9f548be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e383861bc63faaeeb302858ebfe82c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord519
ord626
ord666
ord669
ord593
ord594
ord595
ord598
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord536
ord537
ord644
ord645
ord570
ord572
ord573
ord681
ord576
ord685
ord100
ord616
ord618
ord581

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ