4546f7a02b8f2c5d9327d31c752cf0ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4546f7a02b8f2c5d9327d31c752cf0ce_JaffaCakes118
Size

3.5MB
MD5

4546f7a02b8f2c5d9327d31c752cf0ce
SHA1

d70630e841c792eaa3a7a86d83724070989d155a
SHA256

1473fb7ab435466e1b27521c97b7a0ce929fbe8f3f08340323540bbb1569c259
SHA512

be91380fe4099519e8b045da084fc3735cd50bb146976c8eaa8beb4cdf1993704508f96a03c00ce5f9039ffc3e239985a6fc0612b436b23a535cc601ae64ed13
SSDEEP

49152:OC/9CfWdZSonNiTgubm98g/OJB1K30nHbRymCBwTMB5lal7RChgga0SlI6K8v8Gb:VTSb81aH+I9jZF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4546f7a02b8f2c5d9327d31c752cf0ce_JaffaCakes118

Files

4546f7a02b8f2c5d9327d31c752cf0ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5478b8816938f5694e48b0f8740fa06f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord645
ord648
ord570
ord681
ord578
ord685
ord100

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ