83a8f47b0fd41bdf4f91e116bf93bfe4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83a8f47b0fd41bdf4f91e116bf93bfe4_JaffaCakes118
Size

144KB
MD5

83a8f47b0fd41bdf4f91e116bf93bfe4
SHA1

29ebb2b0aab5920e4a9870cc0fbd1581219dd314
SHA256

302872ee39721f95bd9412a4998ab28acd906d1cf44f8dee1a6363f93e348131
SHA512

0576c8220bb8616161e0ceb4e9f50a4318f7aceb6ce4454f0d33f4d902582a7ad15c13334a219b268be31d97c11478a1a13799661ccb2e0ae7302b8981967a6a
SSDEEP

3072:4pXUH5PDykjCBx2hypK7D6zdX3+P+kdMTcYpd:4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83a8f47b0fd41bdf4f91e116bf93bfe4_JaffaCakes118

Files

83a8f47b0fd41bdf4f91e116bf93bfe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f60d284bc19151b21257d953c5a264a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
Zombie_AddRef
ord100

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ