45c0c36155c9eee79971aae91ebc1d10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45c0c36155c9eee79971aae91ebc1d10_JaffaCakes118
Size

40KB
MD5

45c0c36155c9eee79971aae91ebc1d10
SHA1

288442a263a2892cc5a8c8da1d43bf83b467aacb
SHA256

46c819f5f3d636b4f4d2cc9e38732d5b2de49054ee0104bc5fe8e0dedeb5cb16
SHA512

5e208788b368ba91cfecef0ee938c4cdf551a05db58145aa4150799ed8a7513171fad44de93d5ea37bc56346feb48322785fc55e7cd93a798c3ea8c01ae3062a
SSDEEP

768:Hr8zDqjhSRTRgHkT/oKcoZC/KwGVg1ktx908kjGxEPkBM1h:LSugTRlTwr/KwIgktr08k6aPk+1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45c0c36155c9eee79971aae91ebc1d10_JaffaCakes118

Files

45c0c36155c9eee79971aae91ebc1d10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e9cb4110983ffb7b4233721ab02c7cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord619

Sections

.....
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.....
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.....
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ