ad467bb4c3fa1f4dddb2da4bed4b7504_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad467bb4c3fa1f4dddb2da4bed4b7504_JaffaCakes118
Size

244KB
MD5

ad467bb4c3fa1f4dddb2da4bed4b7504
SHA1

df44a01578364fb37bcdcddcb5bd972c1725aab9
SHA256

ae8ac0aa545b2fd89e05bb4616782a55f8a94df27f74bd18b1cee01036e4cdab
SHA512

fa197d12db9fc217cfbd8d3141d816d414cd6206dbdf532a22a340fa5d8cc5ccdd2d1fb79d5400ae5fae13ede1dbf196625f3af590cb37b65e82a5f86c6962b0
SSDEEP

1536:vMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wMafbxuqhu:kX0e1FB/DpKjCLHAMafbxub0Bo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad467bb4c3fa1f4dddb2da4bed4b7504_JaffaCakes118

Files

ad467bb4c3fa1f4dddb2da4bed4b7504_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262889fed7161dc428064854dcf90cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ