89504945413fc8809b145d65ba6cec37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89504945413fc8809b145d65ba6cec37_JaffaCakes118
Size

40KB
MD5

89504945413fc8809b145d65ba6cec37
SHA1

e4d9221c4dd9114c19e2622072a0b8fd9785dbc0
SHA256

97c5f7ee9df375e9b2b7b4c4940983771990753a09fc3784c260368affa5a3f4
SHA512

9b5a15d1c947235bbffb9aa21e257814d4a1dbcdab053f9fa27760e93ad6cc99761526031a8d079185051fa418ff25e962447f2957aa0f97932eb96bac3f17fd
SSDEEP

384:/20OUmcQ4S8eYJKyzleVgjujFqYJN2Dq+RAnB1:/2UmGeY0yxeyjujMYJN2Dq5D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89504945413fc8809b145d65ba6cec37_JaffaCakes118

Files

89504945413fc8809b145d65ba6cec37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79d365e0fd3749acb89c225f0c7cfbd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord519
ord595
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord536
ord537
ord648
ord685
ord100
ord616
ord617
ord618
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ