4b7251ebcc6eee74c28ec8ced8bc1b35_JaffaCakes118 | Triage

Sharing

General

Target

4b7251ebcc6eee74c28ec8ced8bc1b35_JaffaCakes118
Size

148KB
MD5

4b7251ebcc6eee74c28ec8ced8bc1b35
SHA1

08ba42bdd3ed92c545da59569f50d0922c269116
SHA256

59931f514f714ea8dba1e35e937713b7ad2daa8a5c1cc1888b23547d2cd206ba
SHA512

bc0a44c951123075bcd8aa01461976e8ffbb56ae7a83ff696df20d9bcb39deaf605eb8801f463c8d12f32c024746ac5832108661880b63b61badce669b7f3cb2
SSDEEP

3072:5KR8zzUtLpc+NUI1jmvea04YviFbkk7M4WW9IC5jgB:5SszUtLpDOsZ8YvUbxQ4le0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b7251ebcc6eee74c28ec8ced8bc1b35_JaffaCakes118

Files

4b7251ebcc6eee74c28ec8ced8bc1b35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3e5507e3f3e8b394ea9431b2fc72dcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord645
ord576
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE