b972ee4dc35e03e1fec65a92914240db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b972ee4dc35e03e1fec65a92914240db_JaffaCakes118
Size

492KB
MD5

b972ee4dc35e03e1fec65a92914240db
SHA1

278f45da162d9e748a0fa5cf2ca03148d85d6bd2
SHA256

d239fcd491ca79bd54abeed4b458ca62b8b637ddecc50617a8b9c0724f5ea0db
SHA512

70820e4151f30742a074d4fbda29cc7e26d3cc61cf11970689401c8b4d40f2a3e73a686989af28869b5e2a7610a86dbe30337367359168cd80c57f4628c2a2af
SSDEEP

384:hl18goEu3qzBXwGpdWJQkAfAg/sM/COnU/zfEnq0GZABb8goEu3qx:HzuV/AQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b972ee4dc35e03e1fec65a92914240db_JaffaCakes118

Files

b972ee4dc35e03e1fec65a92914240db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdae0829ff0629083e2cb184b2017e42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100

Sections

.text
Size: 472KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ