a4f95416947b4371cd3258153e7ac4cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4f95416947b4371cd3258153e7ac4cb_JaffaCakes118
Size

180KB
MD5

a4f95416947b4371cd3258153e7ac4cb
SHA1

08c6f626f1687bc7796e81ea7c62ca9a17c6bf47
SHA256

5bca75fe8178440b9846486c8e0a32781c33da60cc109aad9acd08bd79d53e25
SHA512

f8a982a4c6cbb547752697e3897c3d30346e716a0fcf4de5a49eca8a064cf6fc2aa9512c2f67407a70ed3aa3a596d0164ca29c9fecd6627aeddaff035d4e140e
SSDEEP

3072:nauD7mEUP0Fx0k4MWJjFalEadPFO0c6p866znAwQV1wSb:auDH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4f95416947b4371cd3258153e7ac4cb_JaffaCakes118

Files

a4f95416947b4371cd3258153e7ac4cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9596b913fdb187df00765d33ebdd780a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord537
ord644
ord100

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ