461c9ec20b42ec354b877efef974deb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

461c9ec20b42ec354b877efef974deb4_JaffaCakes118
Size

328KB
MD5

461c9ec20b42ec354b877efef974deb4
SHA1

0c1429f896a2041fc0d1ebcc79cfb389fc59cfb0
SHA256

b949bb850bacaf65e5018b1b3d4579a48ba23d9a08ebbb8f9005dc4b3d322fbc
SHA512

f2c95e11497800a07bca7532224c537f539cd3ed0d1b54ff4cee1692a26b687675eff82d139731752d0690eedf5db31f5f2b60081470b881766833bb04ea84b1
SSDEEP

1536:O59Tqri+ywYu1GaweIDLUahu7HiWFy7gJhCnBAB/JuXbp7CgIBAoEnMQRioWX91h:O59AqunIDLUUu7HvFkB60X1J3k15Hf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
461c9ec20b42ec354b877efef974deb4_JaffaCakes118

Files

461c9ec20b42ec354b877efef974deb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7f709a01eceb8aa5ddf7c5771e65fb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ