4b1bd4e989cec6717aa3718a06ed5f96_JaffaCakes118 | Triage

Sharing

General

Target

4b1bd4e989cec6717aa3718a06ed5f96_JaffaCakes118
Size

28KB
MD5

4b1bd4e989cec6717aa3718a06ed5f96
SHA1

006dc996a4f44c4df22d2238989f071ab26b7145
SHA256

6f743cd55cf1db6a1347f89a6b65958429280bbdd66083357f3e2087117f499d
SHA512

84200b49b41644f637c9411dfe94dbc117463a6671c8b1ca49a511bdbf34a09793115e2c547f6e8e2c3e8aff1da4b6d808d4c8c8ad429d4709ef6cf4fcdf3a3e
SSDEEP

384:q5JlnF9tWf6WiGvoBcqno6saLBrEg4M0G:GPnFHWf7mKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b1bd4e989cec6717aa3718a06ed5f96_JaffaCakes118

Files

4b1bd4e989cec6717aa3718a06ed5f96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d5377fa7af6505100eab60a987bf916

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ