494074d83bb079a07db421d26cd74fc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494074d83bb079a07db421d26cd74fc1_JaffaCakes118
Size

88KB
MD5

494074d83bb079a07db421d26cd74fc1
SHA1

6f77fc39d1534b7611685c769311fb4985b8b955
SHA256

0ce8f1034e43daa801926113f7a0b18636c9de3ca53b2063970619c9c18723e9
SHA512

80735e6f3f4afcb220e20f75ed83757822e8ac2b78dfb976307f691eda9084e61cc049ee6b0bca8f60dd5f443ea9b393f2603f85e1e95eb9fd668d9a80ba2414
SSDEEP

1536:RYr9P8q+Az64wQwRK/7s/5U2pfyZ+f6/L0QefMR:RY18q+AzxY2jZ+SR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494074d83bb079a07db421d26cd74fc1_JaffaCakes118

Files

494074d83bb079a07db421d26cd74fc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7bd0ad028895dbbd5837c7eb0d47ae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord593
ord300
ord594
ord595
ord303
ord598
ord306
ord520
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord531
ord716
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord570
ord571
ord681
ord578
ord100
ord616
ord617
ord548
ord580
ord581

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ