48d1d0901c5590a6cb1211d8ce1cbfb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48d1d0901c5590a6cb1211d8ce1cbfb8_JaffaCakes118
Size

1.0MB
MD5

48d1d0901c5590a6cb1211d8ce1cbfb8
SHA1

2800a213134d56f3c24c989a403f763feea2d434
SHA256

d50fe557303662779feae78891c35155fd5e83c40c32dd4979ca114f2ae1856f
SHA512

b2b9477e4501cdd11ebde53a511883c44c88d094bf13c9f8b024e5b4f42649548c492721ac08cab70cb0f7e07fa6bbb719c5af87153424b48c0ced430ac9403b
SSDEEP

12288:TN8rcw6ox2YVYQFfSsHrs9kgyxzLGMap7dhlzkkHlMnvVfq/x+kiiPkrZdYIT4Nz:Tvqn/3gULQhfgwKvVCx+hiu0IMIjq5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d1d0901c5590a6cb1211d8ce1cbfb8_JaffaCakes118

Files

48d1d0901c5590a6cb1211d8ce1cbfb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4f726e722a2d53b51a4234ce03bf136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord516
ord518
ord519
ord593
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord572
ord685
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 988KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ