469adcf5c0751999e7dbc3d5c09ab3e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

469adcf5c0751999e7dbc3d5c09ab3e1_JaffaCakes118
Size

140KB
MD5

469adcf5c0751999e7dbc3d5c09ab3e1
SHA1

833db03f7f5778bcccce36090e8393a1260ce74a
SHA256

3806e1403490ef578f33937fe10a8d453ea124002c683e6584b67346a07a600d
SHA512

7234c74e71060654ef13c0fc253af70dffc7b18e0d58d0c34465fd8feb50832f290de6784e5c10d423562b15359c1ab11e4833eeace1d45b6d43c6fdad85dbe8
SSDEEP

3072:mKloQSrkKgRENEI5apGTwQqVMTW0hiJDea31NS:l1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
469adcf5c0751999e7dbc3d5c09ab3e1_JaffaCakes118

Files

469adcf5c0751999e7dbc3d5c09ab3e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

019c42df0f8c1098661705ed3bf451f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ