4b8547c1d09c26ffbb6b7eba0d89b8f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b8547c1d09c26ffbb6b7eba0d89b8f8_JaffaCakes118
Size

56KB
MD5

4b8547c1d09c26ffbb6b7eba0d89b8f8
SHA1

859987ad239d307953755d0a63e6ed2ac334f816
SHA256

9040f408e12db30cd21ca074135b81562fb1fb5227863920699c111fc2d4c041
SHA512

fd52d04574d50a7e185b806ab774ae33f10dbb279aeef81cf48c9b965fc784eef9fce7a1130c9ba3733cc4669fd89f582a804bec0e58312158e5e1a118a61143
SSDEEP

768:t9JIlkV2JUUxuwBmGqFndcTPVXQjHtDhe9XLElOwtkV/xu:t9QA2++qvHIV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b8547c1d09c26ffbb6b7eba0d89b8f8_JaffaCakes118

Files

4b8547c1d09c26ffbb6b7eba0d89b8f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f978b314a28ee6de841b6e0c93a3f39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord535
ord644
ord573
ord685
ord100
ord579
ord616
ord617
ord619
ord650
ord546
ord581

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ