48d4d761fc10b1a2fe86508490e3449c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48d4d761fc10b1a2fe86508490e3449c_JaffaCakes118
Size

72KB
MD5

48d4d761fc10b1a2fe86508490e3449c
SHA1

43448d43af479d4fb203875a6be00fb9cecec6a3
SHA256

02991555c0d9af214e6c076e12a81f85e48bea4dbf1a84e1002bb4e4b784de4d
SHA512

6b4d1191cdfa01bc349d93b98e9e88b48a9d4a23c617c066c5e225a8a498373d61be2225d398f17962b74e012abf96ebdca5c3093c8a3fe0033b74839a6bc200
SSDEEP

1536:9rrmmBDx/vq0mlHxiFSF8vq0ml2oDim2r:9pR47iEF84fn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d4d761fc10b1a2fe86508490e3449c_JaffaCakes118

Files

48d4d761fc10b1a2fe86508490e3449c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

556e52507656ace2105df59ea525dafa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord100
ord616
ord617

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ