48bb9cf618f634772199f5178e4fb7d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48bb9cf618f634772199f5178e4fb7d7_JaffaCakes118
Size

24KB
MD5

48bb9cf618f634772199f5178e4fb7d7
SHA1

17225c451fb7d222a367f2c3c09792a3b9971199
SHA256

48c9b319abbd483b1c25cf7d44c1f3bdab5a2efb48eeb2a31b586282779f52b7
SHA512

9f1cee469647e585883daf57f0a18cf75d3497da3c30149d1c6cba0b2f957bc19fcf5d145a69cc8841015c9f3c724a7e25154f057a023b27a06222e41fc96ed6
SSDEEP

192:bCfn6y7nkgxAwgpT+e4Q2Bux7WoogZM6KveBEaheKzFB5VJITmtZz4Z4ZTexNwsC:bCf6y7nkg+TLx6ZgZoWB/4KzF7MNwWs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48bb9cf618f634772199f5178e4fb7d7_JaffaCakes118

Files

48bb9cf618f634772199f5178e4fb7d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09a19e2b8b775e582dd8ea50e4607cfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord685
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ