49840dbb72553e58f4e2e49a88fd39b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49840dbb72553e58f4e2e49a88fd39b8_JaffaCakes118
Size

72KB
MD5

49840dbb72553e58f4e2e49a88fd39b8
SHA1

535a3469e401ebd913e3fffb4c09c90846e2c7e1
SHA256

b00fe118f59281646d0ef007b89917791c2d687c7dec180541698bfbd083fc45
SHA512

bab5c15d7f8b00ce266241fb12f28462f8e9335c692abaf14ac6e8e3b1e7198574eee419254a8378ea1b9551efd4fc5b82eecdfd9c15c250a0198c51ef642f55
SSDEEP

768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRr94:teThavEjDWguK94

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49840dbb72553e58f4e2e49a88fd39b8_JaffaCakes118

Files

49840dbb72553e58f4e2e49a88fd39b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ