47ddea32446b24a8fd444f015d132a25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ddea32446b24a8fd444f015d132a25_JaffaCakes118
Size

158KB
MD5

47ddea32446b24a8fd444f015d132a25
SHA1

9ec46dfec46591b753b18deb133768d7c112b283
SHA256

c87f10cae34b3012faef1d9d7961c76c6e693ed38b5cfe130a90d89dde068de0
SHA512

6137ea470432e7b0ac670307447c00f82aa64780874fcf32482601d09b798507e225dd707a19141b49257c81a5e1db84982b3b5f5664c9b7bdce530d19fe174d
SSDEEP

1536:5rrzhckPDex2g/YvOXECNd8xaNDWlbAFNaRwer6rmKUqjhAW:5NFCAggvOXe48tIaRwer6qkj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47ddea32446b24a8fd444f015d132a25_JaffaCakes118

Files

47ddea32446b24a8fd444f015d132a25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af6a1d666ae69300d37c88894fd61661

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord303
ord598
ord309
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord717
ord534
ProcCallEngine
ord537
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ