747f3d8e3d8739eb7579badfabb6683c_JaffaCakes118 | Triage

Sharing

General

Target

747f3d8e3d8739eb7579badfabb6683c_JaffaCakes118
Size

148KB
MD5

747f3d8e3d8739eb7579badfabb6683c
SHA1

84c2bbc96eb2d65f46fedf8b5bd142e89da2b137
SHA256

806cc522ce74a577a8e796e48033370130244d6fdadbf69f4997458bc7ec2c2d
SHA512

fd7e362ba838b215cca8d920c9f7e836f25751e4968b9a7a5e2c1747abbc7f3786f39d5f2a2a495c1f39b56d579c339dd030c47e87dc2c3d99430dac590fee1f
SSDEEP

3072:IS5PDykjCBx2hypK7D6zdX3+P+kdMTgwpGxP:UpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
747f3d8e3d8739eb7579badfabb6683c_JaffaCakes118

Files

747f3d8e3d8739eb7579badfabb6683c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5845a49eca80f266d23a4a1dffc45d23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ