4b88933533c0d82b4142d3d847d5da27_JaffaCakes118 | Triage

Sharing

General

Target

4b88933533c0d82b4142d3d847d5da27_JaffaCakes118
Size

432KB
MD5

4b88933533c0d82b4142d3d847d5da27
SHA1

aa9a7bb55a289a94428e80313f4b4be8144c4e0f
SHA256

97ad0b0e2c85f67bb12190645641e5e497b675adc5df2760c33b86b8ec9d62f9
SHA512

63d4010f0fdea1dfedbd4cf762cb1b0c14a411c9ce52a5493cf7208bfcc2b28327de6fe0e0fbb7c2e708cede643c99deec8a1e6ba47db55293bded6cb55ca3ce
SSDEEP

3072:ceZrrdOX+w2MmLyVOtjrAgKjExcSyXFxzxYXLT8K4xJDohY35T4H8bQRaYVYrUUG:ceZlOXnhYssZw/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4b88933533c0d82b4142d3d847d5da27_JaffaCakes118

Files

4b88933533c0d82b4142d3d847d5da27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec720ab2107944e83172e2b38e32eb41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
ord698
MethCallEngine
ord523
ord632
EVENT_SINK_AddRef
ord527
ord528
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord574
ord685
ord100

Sections

.text
Size: 416KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ