4933232c868827a303695438d37969a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4933232c868827a303695438d37969a9_JaffaCakes118
Size

40KB
MD5

4933232c868827a303695438d37969a9
SHA1

40cc278486dec7dd2d59c1d6de18f1056a6c2484
SHA256

9906eb37b00de578ae53dc4a898bc366d3fde535aa8e72ba23bca3234555a21d
SHA512

120653ab814e2180f1f1ab271d389eec25a64e22c39ccd714410cb6ad5fcc04ae3e9452e8f5bd3d5056ca474086f5af35cbbf7fb4fdb2478d4ed3de1d4c2a4cd
SSDEEP

384:iLHUnpJhDp3zdHYMlE/xSccKpcR/VfqeNMFS0dyyJ/P2eGW8VBIdBBIC+LJBzPf:y+ph4+c9pKfqEM80M4lSODOTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4933232c868827a303695438d37969a9_JaffaCakes118

Files

4933232c868827a303695438d37969a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

230409bfc54155a1cea218bc5d525bb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord595
ord599
ord306
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord645
ord648
ord571
ord573
ord681
ord100
ord689
ord617
ord650

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ