47f359c48dbc275aff8d80e7287a092d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47f359c48dbc275aff8d80e7287a092d_JaffaCakes118
Size

174KB
MD5

47f359c48dbc275aff8d80e7287a092d
SHA1

0e8d1a17d21af40b7bf9eeac2ae08de28692d79c
SHA256

291dc576ee4f73274cab0f730d40fa9762b0152c3ec6ab435dce97499a0fb410
SHA512

4c9c88eb5020108d589353618547a2744c998bfbcf008203a76b122c1d0bf3e21eb6e43fae1edb264eea245ea69e21f9e439ecd40fe110dc044f355979a3bcd8
SSDEEP

3072:AIdcFLEdskgrt05bnwhVh6PTPre0BUrzPjxr+:1WjZ0xCVh6PetzPlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47f359c48dbc275aff8d80e7287a092d_JaffaCakes118

Files

47f359c48dbc275aff8d80e7287a092d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE