493b0f2ce14f22b065de830b3bb5786a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

493b0f2ce14f22b065de830b3bb5786a_JaffaCakes118
Size

244KB
MD5

493b0f2ce14f22b065de830b3bb5786a
SHA1

4977f5cd7912344437a5fb67127f020f5de98d6c
SHA256

0d44d084eeeebfec827815f12fd58c88f7a6d52b0b45431019b8286d133fe1ca
SHA512

1cd77570145fb617d75d70ea1253ae8502b312fdebc6cac36151782a634fb28ddf2bb6b6c399dd5d01baaab3c39254f86aaac0600969d8aa873e328eee115058
SSDEEP

1536:o6MJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wmZC7HLx:gX0e1FB/DpKjCLHAmZyLxbk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
493b0f2ce14f22b065de830b3bb5786a_JaffaCakes118

Files

493b0f2ce14f22b065de830b3bb5786a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8d04caf52ac023de8a509362c08e676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ProcCallEngine
ord644
ord572
ord100

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ