75d7407ca353d023f7266266c9545068_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75d7407ca353d023f7266266c9545068_JaffaCakes118
Size

4.5MB
MD5

75d7407ca353d023f7266266c9545068
SHA1

d9021e45a67ebb61a2337a94b478ccb623147238
SHA256

6ec9b8197208a5f59f8c050b5dbd8a32bfbe3164cf7b71ed4740cc9528e2058c
SHA512

eb33572f10e1dcfa116628266053a7a2c762dddb0e36cb65cdb1ab2bc39dac1501d5bb12bd3c47295ca7e96c074fd47749ffd856d28c516cb9c14a44e50b4bf5
SSDEEP

49152:YhR3NitVcDGmV1R2GFNChgga0SlI6K8v8GtFwsWpnP2PLTvq4ST8t5wICfWdZSoq:eR3NivQR9FN+IvSb81a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75d7407ca353d023f7266266c9545068_JaffaCakes118

Files

75d7407ca353d023f7266266c9545068_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cbf5ede8f5689e720692e896bdfa50b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord595
ord598
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord645
ord648
ord570
ord681
ord578
ord685
ord100
ord618

Sections

.text
Size: 976KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ