4a14ce749ceff632ae37b4ef4816d108_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a14ce749ceff632ae37b4ef4816d108_JaffaCakes118
Size

524KB
MD5

4a14ce749ceff632ae37b4ef4816d108
SHA1

7748c96b9d7bd646b56488157da7c27c13a9a62b
SHA256

cdf69dfd7ca272c8723ba549c8ee6d6747531976a1ab4e8b3110a6ddbe190dad
SHA512

627fc2daae7bda2fb1cb748b1a9d8b20110a946920dd6d61b282e143dd4e77564af00a373bf36d0d760391f6c0f47629e0d3925062f2520a3eb3020f5c529108
SSDEEP

1536:Kze1Iz1IHRZjR1WCGTpAZzr6IKxW8L72XvvBWQR6AAiH9zc8cagtkn5clNYodWqX:sKrG1rHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a14ce749ceff632ae37b4ef4816d108_JaffaCakes118

Files

4a14ce749ceff632ae37b4ef4816d108_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b99b16d0093f357c814f82da170a2265

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ