4939af6cc33ea16fa55516a6eeacbf45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4939af6cc33ea16fa55516a6eeacbf45_JaffaCakes118
Size

964KB
MD5

4939af6cc33ea16fa55516a6eeacbf45
SHA1

89d7286b203ae7d158d18c029d57981438028cba
SHA256

0b41fdc01f44cb059726131857209f6eac881407f8b2233ebb897e203ac40ee4
SHA512

c4bec56ac49acaff08c603f769bcaa7125120a49bdf885c5fd460f741be692be30fd2acc18b25a4aa90f4b514009f82e482e59f28877c44540e06bef845b8d99
SSDEEP

12288:YE6f2a+AXfq3zODw4k9MsTXIe9IgNLtWPFvQpqsLDAcRk5oDpKnI:ob+gi3zODwx9Mj0Sv2VvAcuoDpKI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4939af6cc33ea16fa55516a6eeacbf45_JaffaCakes118

Files

4939af6cc33ea16fa55516a6eeacbf45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d2145e0e98d5952ffb75c3e718eb751

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
ord696
ord697
MethCallEngine
ord518
ord519
__vbaCopyBytes
ord553
ord660
ord666
ord667
ord706
ord632
ord525
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord675
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord530
ord717
ProcCallEngine
VarPtr
ord539
ord570
ord648
ord575
ord100
ord610
ord613
ord617
ord618
ord619
ord542
ord545
ord548
ord549

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 816KB - Virtual size: 812KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ