4b30c7e097bfa66eedc2da22cce62851_JaffaCakes118 | Triage

Sharing

General

Target

4b30c7e097bfa66eedc2da22cce62851_JaffaCakes118
Size

247KB
MD5

4b30c7e097bfa66eedc2da22cce62851
SHA1

054b4acda46d7028d4dd5a1cff702553982bbf62
SHA256

e8693c643dd1de29e05bb7f428f3ff96c3eac802632370aeb2f25fb3cb75412e
SHA512

a5933352f5300f9a2e323db24ab3b78ec0d86e7d3ddeba4b6209952d86425dbea7afe2eb0316d3f68dce6c5228cdb1e4df37c1e80a3166038624c19e1b11c59b
SSDEEP

3072:bWGKloQSrkKgRENEI5apGTwQqVMTW0hiJNPTyPX3upd1qnAEzYds7E7/dThEgFJD:bWmX+pd1bEz2s7ETRhEgFJ+2cK1Oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b30c7e097bfa66eedc2da22cce62851_JaffaCakes118

Files

4b30c7e097bfa66eedc2da22cce62851_JaffaCakes118
.exe windows:4 windows x86 arch:x86

019eca5aeccdd5aeedcf25046778eb5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord619
ord581

Sections

.text
Size: 244KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ