46b3fbcfaeb8bc4720a73c42a37a2c9e_JaffaCakes118 | Triage

Sharing

General

Target

46b3fbcfaeb8bc4720a73c42a37a2c9e_JaffaCakes118
Size

932KB
MD5

46b3fbcfaeb8bc4720a73c42a37a2c9e
SHA1

5c02e8934d29b92d88c3898ea1956ef1a917f794
SHA256

801ee23e06ab8243534164fc4932b7c452994c3654c53fdd526f322cde9000ba
SHA512

7a6e4b364185331f51f7260c327466b104754953b9c8fcb1229e5d40c22644bed0d1ff39ae44184554773b319a7a7bb577c97a531665c0f43e2f25bc7dd90f8b
SSDEEP

24576:Wbp+WAAklAVxhc20OyR0CFUZxVHblBtEJPc:WbMWzKN7UZxV79EJPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46b3fbcfaeb8bc4720a73c42a37a2c9e_JaffaCakes118

Files

46b3fbcfaeb8bc4720a73c42a37a2c9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6bf9adc39e4444f2c5b941eafe586525

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord598
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord531
ord645
ord570
ord571
ord100

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ