4b9e82144551b04382d3c1c8bab13585_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b9e82144551b04382d3c1c8bab13585_JaffaCakes118
Size

180KB
MD5

4b9e82144551b04382d3c1c8bab13585
SHA1

5533ba0ca1b5e09d6b715cf3a0e441ad2ff25f0a
SHA256

1fea944dd1ba5aee52106ba2c4b0028409d8ca35938637627be16173d509883f
SHA512

a4719d32fd4a5f3f8ba8c0a86c09879a9e900432e040e1134c6bf2ecaa6f0829173213d27b4e08659a4bb198bb588b1b555146ee8f632bed299d150a94723475
SSDEEP

1536:Jrrs2vR2oknrKH4Xq4I3c40qjC5jRIOJIMv8ftrJO3BRrh:bR2vKpvtjCrJTEftERRl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b9e82144551b04382d3c1c8bab13585_JaffaCakes118

Files

4b9e82144551b04382d3c1c8bab13585_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8eb91363c1137469531470370b532800

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ProcCallEngine
ord644
ord537
ord573
ord100
ord619
ord581

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ