4a18124e4230b2e7297697af8939543b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a18124e4230b2e7297697af8939543b_JaffaCakes118
Size

44KB
MD5

4a18124e4230b2e7297697af8939543b
SHA1

ce9a9e8f392560c2dbeb85306dd84a9e10696ff8
SHA256

db5c636a8f41e78a2a75c17d8eaeebdf00c6b413b6f1245d6791f65fe7fbdc18
SHA512

a8ef702722d7a36b0d5fac8ceebb9aaaa5022dc28f0ec21833deb74db4464495fade1c4c016bbe19c1fe27471c5b8f022e5ef4aeccde29132eb690746e98df4b
SSDEEP

384:PdYHXSS9O2s9QTRDOMs0Jp6p3TySupRxmv1rBR1euwddnr/5seHnnpIGB5EUncf:Pdd6v/s0bq41U11R1eucdnr/5seHpdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a18124e4230b2e7297697af8939543b_JaffaCakes118

Files

4a18124e4230b2e7297697af8939543b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54837fd18cf90a3ad2c423d0e158a596

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord665
ord595
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord578
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ