47993dd2d7d827d676eb9feea0a45c0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47993dd2d7d827d676eb9feea0a45c0a_JaffaCakes118
Size

104KB
MD5

47993dd2d7d827d676eb9feea0a45c0a
SHA1

6b164710236c8f0bf7adf20edffb3b3594f03f79
SHA256

01086db9ea1656af6095d0c50c7db8d88c48300a191b9594a3cd8df3d1b6d717
SHA512

3f42efc3072bf7ad4bd72af884530f6004c09ae29022f767a6a4d9c4a12a18029c43fe62ec3a89448f1969956237dde2994c79dee7755dd544f296aceb68040f
SSDEEP

1536:Vyl+tVj0VedVanrYYiPSLlo7Fu55wwCHdJBc:YLnLiP0o7wL9M7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47993dd2d7d827d676eb9feea0a45c0a_JaffaCakes118

Files

47993dd2d7d827d676eb9feea0a45c0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

478afa0b0bfa7aadc99efd90c1c7e8e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ