62d2803b34058793faefcbcfd02c2f1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62d2803b34058793faefcbcfd02c2f1c_JaffaCakes118
Size

144KB
MD5

62d2803b34058793faefcbcfd02c2f1c
SHA1

46c5cffcb600accb4965a7640297275115571d67
SHA256

c203ef672173f8cf826943cafb5cdb1ff93e21350880193111b0c74e1835dd57
SHA512

5665e2d402f1bae1515cb78d14d7a2c2d8af7c7a37727f0cb62fdf7b1b07a76ea9972a9fa76f86fa0c726da07b0fd2a147a10a525c1669ad0f8d78bc6645aa89
SSDEEP

1536:zNv1g1X+CM128Uq+bWhrBDbbM128UqvM7M128UqdTknxSpBtJA:ZgbWkZpBtJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62d2803b34058793faefcbcfd02c2f1c_JaffaCakes118

Files

62d2803b34058793faefcbcfd02c2f1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c43e8c9cc8e0b668af20c978dd5945d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord100
ord581

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ