465617986dd48fbc379986b039b1e20f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

465617986dd48fbc379986b039b1e20f_JaffaCakes118
Size

80KB
MD5

465617986dd48fbc379986b039b1e20f
SHA1

0ceb3ee60307ac4962e3538146f32e3ee0896d4b
SHA256

d87c5bf3963f6726727f3e89d9c697ba03e9a93e72a3064d980421086bd950a6
SHA512

d0e57d1a0ff0acf3e3bdb5bcb87b1dd49d5cd1ae78b6af53efbbcf37390b1b4373b716649fc8b204b1ce196d551ede6c8fe7699b4b7c4cee722f7ee742eb6534
SSDEEP

384:1l1nqb6e+HZ7ssTM38888X88888888888888888888Y4G0ontvE2DTGETq3136c4:1/nqGTP2f0MLqxu3N6+//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
465617986dd48fbc379986b039b1e20f_JaffaCakes118

Files

465617986dd48fbc379986b039b1e20f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262889fed7161dc428064854dcf90cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ