d039893852c4a8d041e1de3f3ad87fc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d039893852c4a8d041e1de3f3ad87fc4_JaffaCakes118
Size

76KB
MD5

d039893852c4a8d041e1de3f3ad87fc4
SHA1

d7c412450e0d26cf75d69edec2e20586d955b4f4
SHA256

a74851cafe89ff7fcd791da40f78ac2462ecff60feced3cb30524f8bd6e5c5e9
SHA512

5072306a73fd94c791486a643a2fc5bf999a120b59b1350aa988c2862d9077af70fc14c0e23fb0c268a56b52714053b5573d771af97562138ea4a015616cd742
SSDEEP

1536:svF3nwzUTQzBcxnmSPRNuZ3K3WOvSQzBJUUjFF3:6FXwzUMKmSp0Z3wDrUUjFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d039893852c4a8d041e1de3f3ad87fc4_JaffaCakes118

Files

d039893852c4a8d041e1de3f3ad87fc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66d081a2d79aed97b5f862dc88a6634f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ord645
ord576
ord100
ord617
ord580

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ