4bdfbd933db8dcb3a2b8577eeae65937_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bdfbd933db8dcb3a2b8577eeae65937_JaffaCakes118
Size

196KB
MD5

4bdfbd933db8dcb3a2b8577eeae65937
SHA1

8e5237e31d892000adfedb7e35b596daa506d24b
SHA256

180fb46797cb227fa88deca1bbd790b575f258ecedf65974992fff61d27bb9b9
SHA512

0d5799dec59943c187f4ea033949dd4432481dfb34622b902cc58f46f2e84e5dbc94f18125c2cab06bebe04b14056ce6aac108a585291eb025795f1c1b1c5253
SSDEEP

3072:/TPyG352HJYQrqLjNWDVskzWBdIENT06:bupYSqEskKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bdfbd933db8dcb3a2b8577eeae65937_JaffaCakes118

Files

4bdfbd933db8dcb3a2b8577eeae65937_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1db004fe5af3188366fe8f3206c66dcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord616
ord619
ord581

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE