c9367235ab6ac9348543a8fadd4350a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9367235ab6ac9348543a8fadd4350a0_JaffaCakes118
Size

7KB
MD5

c9367235ab6ac9348543a8fadd4350a0
SHA1

bb27f6a2f21d6cb2a4339e6843ab037eb8fafb62
SHA256

0748508d270824e87ddca83474d0b76e318d4b4cf932e2f78abf389e9eb9417a
SHA512

3fa2ea8ce996980835b515de0fea1603f2d5696059a3b9d9b83cbc5aaaaf29ae81aa4b2746ff2fa33251c8b8c987a67f1828d262e6b740155016fb4db1dcc2a0
SSDEEP

192:RB3+N9Q5oYGVSN8+X2gLx0KjLyR8g04grqBESe1txSWjOw82LGRec:ufpYqSNrX2gFDjLFg0fqOVtnOwhLRc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/modulos_de_seguranca.exe

Files

c9367235ab6ac9348543a8fadd4350a0_JaffaCakes118
.rar
modulos_de_seguranca.exe
.exe windows:4 windows x86 arch:x86

54f65f07f3c5110fca96365066215033

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord645
ord100

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ