b48eb03fa26b2e4249e81860a163e8bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b48eb03fa26b2e4249e81860a163e8bd_JaffaCakes118
Size

492KB
MD5

b48eb03fa26b2e4249e81860a163e8bd
SHA1

1d28aafc0d60e460eba1b43ef0b3d2fbe98fce4e
SHA256

2af275fc3d4d6432f0f7a54a7ca403e12c33816c1a85389691bb625d90f329b6
SHA512

6a98d0b0c9640e56b2397feae26766c5e10a69bfc0ec66f4dc4964bb82edac198b4b5806204d2c20a10d37f195db63631ef4b798b1032029d98fd6a27e39baea
SSDEEP

6144:4Tiv/Gw56kRAgPtEyme2+ceyUzJrAGqTlnmxWxlvnXhLJX:4u6hglmeSeyUzJEGqRmUDnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b48eb03fa26b2e4249e81860a163e8bd_JaffaCakes118

Files

b48eb03fa26b2e4249e81860a163e8bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4692a749a6548e0135e42206ef9607c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord631
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord645
ord648
ord681
ord100

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 412KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ