942d7d2a9d4895306d73a0e91bf2d59c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

942d7d2a9d4895306d73a0e91bf2d59c_JaffaCakes118
Size

88KB
MD5

942d7d2a9d4895306d73a0e91bf2d59c
SHA1

9a219a4a8d5cdb87f9883e76b25925b8e7c608cb
SHA256

ea84c8579a4771c8298668bfbb6b70155de5f815326c6bddb44da42874206b8b
SHA512

6c7bc49b435ba8fff272e1f3d3ec89cac758913cd655e44b1b8e5583aa3c12453797d1c4636d1a76b7a61d48053ba877e6448038c2c9d3325604a53f7826ae27
SSDEEP

768:LMNk0xUDUTo5kBsG2OzQEwvuA+J9GMbLJTyt6hvcqrTk07s6h5O9FtIiPUxpRbY/:gNXyExsifw6JdL/VTjIFtH8xnYF8DU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
942d7d2a9d4895306d73a0e91bf2d59c_JaffaCakes118

Files

942d7d2a9d4895306d73a0e91bf2d59c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05124817fcbd5cef5dfc9d150070db4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord520
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ