463ab3bd56e091ec5e40ade6f9aed778_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

463ab3bd56e091ec5e40ade6f9aed778_JaffaCakes118
Size

100KB
MD5

463ab3bd56e091ec5e40ade6f9aed778
SHA1

98d14abf0db704b9e8ec141a7b3088f947537362
SHA256

1472be08e4c8d8e57b7ac316c5c96eceae41b046b123fdbc6f76e6311f3da580
SHA512

8ab160837f39b2fccbb2a1e052fea7623872815b8bca88ca981e976134ee4342de52476b01c7ea3ff58feffc0cb2777e8e7cb637ae68c11ad43280f2295801ca
SSDEEP

1536:V5ZZiNQ4HeUhqpl1ylkv3Cd1rK6TWNtzeoq4eEyBNl8UjqGPfw:9kNQCkkU3CG5E48l8afw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
463ab3bd56e091ec5e40ade6f9aed778_JaffaCakes118

Files

463ab3bd56e091ec5e40ade6f9aed778_JaffaCakes118
.exe windows:4 windows x86 arch:x86

555675564b206c3ca43d10c19efe906b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord667
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ