4b35520b3233403173b0102e780a26a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b35520b3233403173b0102e780a26a4_JaffaCakes118
Size

40KB
MD5

4b35520b3233403173b0102e780a26a4
SHA1

9e87c24da80bb2d8de8ce5cac393e0edc97e94e1
SHA256

1b898d3646c538c8f0250fa0caa0285d4eb2121502391492cf5f12ba2827a4b1
SHA512

c3ef4e6e50a7d100e8464c5af391433a30146bf880ed8e650db9aefa4f3d578a626ea4ef026c5bc5c82b4b0c5611fde37dbd4fb1936be13a2c611f75a6b5e0bb
SSDEEP

384:Je/+Ae/8e/tfF1ajfJCtDi6F/Fr5M/849Ln3Df1L9bSLJ5ne/tfF1re/ke/+:wQV5nacDi6FtO/84ttL9OLJ5e5nSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b35520b3233403173b0102e780a26a4_JaffaCakes118

Files

4b35520b3233403173b0102e780a26a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d558d5d64a83bf2f73fe141b0d88b7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord663
ord595
ord597
ord598
ord599
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ord531
ProcCallEngine
ord576
ord100
ord618
ord546
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ