749d9db1c30e83d57fd0a7c0f066425b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

749d9db1c30e83d57fd0a7c0f066425b_JaffaCakes118
Size

153KB
MD5

749d9db1c30e83d57fd0a7c0f066425b
SHA1

c070f78cd4a1b5244db8c5c7673d0ad31d5a7e2e
SHA256

d7779058a92409fa4e2a4e96c0f08543f4c77a5f4905662ee601209d954735c4
SHA512

d94473db89116333a2cb6e8345d82bb3fec0d2b02788d266aa45b9050b6fbc5fbd19ae77ec981d98946fdb7cc3925abf8398ed9218d28d8804a3359cf0a59cff
SSDEEP

3072:k35PDykjCBx2hypK7D6zdX3+P+kdMT8lIXLjhkhs:kTujx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
749d9db1c30e83d57fd0a7c0f066425b_JaffaCakes118

Files

749d9db1c30e83d57fd0a7c0f066425b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6bc41d87f40fb3a336955c7892636dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ