a4ba6cd4ce68ee19695d0babaf425357_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4ba6cd4ce68ee19695d0babaf425357_JaffaCakes118
Size

88KB
MD5

a4ba6cd4ce68ee19695d0babaf425357
SHA1

399c89999e1280cb428d7e97eb9c08ac17812a79
SHA256

3c568f231b201a9b7e59a97a6f584829b74b1f80fc951227bed70b50571f0bb5
SHA512

f7efd2f8c51c600a47d96aaed74986842c8cc556936d86fb16d87de47db514f3925a2784aafc92ab45801decc8fc99531fa704adfdbc62cd9a68e6da2b6decb5
SSDEEP

1536:EFVq09faffmHN9mnovtkuDU0nGzFj8kBz0gKST6o8NpOeE/dS8N/P8oXD8ibW:EFTcXmHw6o8NHEhtXXW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4ba6cd4ce68ee19695d0babaf425357_JaffaCakes118

Files

a4ba6cd4ce68ee19695d0babaf425357_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9bc04e29780f70d67c333157b6553ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord100
ord616
ord581

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ