74155bd92f091dcb9499bf773fb7d455_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74155bd92f091dcb9499bf773fb7d455_JaffaCakes118
Size

60KB
MD5

74155bd92f091dcb9499bf773fb7d455
SHA1

f6e735a2a5036b603a5eccab4745598dc5b04efd
SHA256

8744389473bcf7e26b5058755c5062988974d0539f5800a79078c162ec7b4d8f
SHA512

6afc7b456f5d40bcff737890ec3ca70f2394ca50d6c8c6581d9a88b2cdaf2cef3a9d17cee0f4c4ca88113525783fb39322cfb2c2f4ecc53caa33f35731f3ee54
SSDEEP

1536:3KJ47PHbbSNtS0SIH0NMhsjWZUkHotxqn:NPXZWxotxC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74155bd92f091dcb9499bf773fb7d455_JaffaCakes118

Files

74155bd92f091dcb9499bf773fb7d455_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b88064f8371eccdf9f63660742d8aef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord187
ord696
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord614
ord431
ord616
ord617

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ