c049f86023d2a9377b00585db3fc6136_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c049f86023d2a9377b00585db3fc6136_JaffaCakes118
Size

36KB
MD5

c049f86023d2a9377b00585db3fc6136
SHA1

1837ce74b109d515cf23d0fc33282c3517505b6b
SHA256

2bfd8ffd5b9713ae9ab10e9a3962c48497327dc8fe058b80de2ab7827dc4c6bc
SHA512

354de8724bb838153a287176e463c1e410b2ac8c5ce28179e4922718938fcf7f77afaa9846275c570304976a6919ba35de72d0b15743fda63893b0614b3e97bc
SSDEEP

768:WEbiXhV4gIf/oYC0er3JbQFKFflxxtH/Y:FbiXdE/2tA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c049f86023d2a9377b00585db3fc6136_JaffaCakes118

Files

c049f86023d2a9377b00585db3fc6136_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2ad83bfb8acf27ee4c5ae9b4f75a0df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord715
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ