47a313571ef46ed662d1ff4cfcf1f035_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47a313571ef46ed662d1ff4cfcf1f035_JaffaCakes118
Size

109KB
MD5

47a313571ef46ed662d1ff4cfcf1f035
SHA1

584fa17b9cdd4adb0e082f8ff56b786f9f897c92
SHA256

c1ace917240f674c1d7019f6bdae08d03c98da2f14f8390df3a83fad1f127b0a
SHA512

6818905d47dd8e4e52273b7a342a57a26cc54df342b87c20d31af8e2a69864a07a178c4c80f03cd36544a8852b8e44c8d430e2922d352ed8dcd9c822aa139831
SSDEEP

1536:Fnqdu3abBGy3G8V0iuoKWGq6KfFkWGq6cjTA:FqhMPsKWGqFdkWGqzjTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47a313571ef46ed662d1ff4cfcf1f035_JaffaCakes118

Files

47a313571ef46ed662d1ff4cfcf1f035_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8767f78a3f29bbe05ebe31e0976cc66c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord553
ord669
ord593
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord717
ProcCallEngine
ord645
ord685
ord578
ord100
ord579
ord616
ord617
ord619
ord542
ord650
ord544
ord545
ord546
ord547
ord580

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ