4b0f51d0a75859ec2c8553a552b93e6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b0f51d0a75859ec2c8553a552b93e6d_JaffaCakes118
Size

352KB
MD5

4b0f51d0a75859ec2c8553a552b93e6d
SHA1

7944121e59218d9721f5485775b4de493701d874
SHA256

38ba44bc4f24860a289517f129f4e2516bbc28f70b98e559213a5b3f59bf2b04
SHA512

55f345108163ff0ca82f3257e0313913cfb088685674c471e290e40a69d99ab9485fceb87fa800b6501517d84b0b4fb3962e2ec9cb365e59ab0bd345c01cccce
SSDEEP

6144:y7V64AmxmqtC+kAgZ/xP/QwBgXxZbckuLqa:y7E4b7C+kAgcG4Wv+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b0f51d0a75859ec2c8553a552b93e6d_JaffaCakes118

Files

4b0f51d0a75859ec2c8553a552b93e6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

560638b395094d580ef411f718352c45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord519
ord598
ord599
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord685
ord100

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ