49afad40c34d8aa32e3fa306d39aae13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49afad40c34d8aa32e3fa306d39aae13_JaffaCakes118
Size

860KB
MD5

49afad40c34d8aa32e3fa306d39aae13
SHA1

39d4c399fa762490ef6bbe6f8393bd1304e51a3b
SHA256

c207315bd1707e6145c6ee1251dee573c4b90a4ed33f7bc36bb5ca514d98c465
SHA512

4e8ee82c327dff82daf0d60429b7e290134030274935bd5838cc924af32cde8549dec19743fab3e84146fc95cb5a3dc04875b7b1ee0bdfe6bb15910e47f58c8c
SSDEEP

3072:J6X65lmqgofsjv8SvIbcL+CUWbgZVoIf5J3i8BOavVUBuR8f9ODuxPw9yYpw9Gg8:J0SWjx665

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49afad40c34d8aa32e3fa306d39aae13_JaffaCakes118

Files

49afad40c34d8aa32e3fa306d39aae13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

602d3fc39de8829dc220f39795f64f63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord522
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 852KB - Virtual size: 851KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ