93b2949f3eca88d8a95138a3f74589c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93b2949f3eca88d8a95138a3f74589c7_JaffaCakes118
Size

652KB
MD5

93b2949f3eca88d8a95138a3f74589c7
SHA1

df8a5f2f1e133d43ca06f7fcaa893a05704f9997
SHA256

6e6397dff19ba65c503dd36333f585896b7100216e121696dfa2dcce2dd9f9f6
SHA512

e685f7d529019540a3fbe4964d57ba7f7d1c1618734116adfaf34659d257a3b21b1b50e9d9a0f105a41a5b90eff8db3091cb58a466efd27b05ccaaf1a92c2bdf
SSDEEP

12288:sGUGpjITQNEtfl+DhVhhV2bva8Nc78dIp522/NgP4lQPptu0fagPoIYx6j:0RlzbC8Nc78dIO2ViPDtlY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93b2949f3eca88d8a95138a3f74589c7_JaffaCakes118

Files

93b2949f3eca88d8a95138a3f74589c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f1237b144f1a649f567d66eb00b8cff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord648
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 640KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ