d135aee6047b211fe05e6732f6be02e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d135aee6047b211fe05e6732f6be02e4_JaffaCakes118
Size

196KB
MD5

d135aee6047b211fe05e6732f6be02e4
SHA1

49bd76b6576513c1d5fba57603881ee71b2626b7
SHA256

4b9b36c77236edbb5ce5e1d19bb5ec2d1c9347bdb8774c75ae6b5b15bc44244c
SHA512

13c000b5ab81ccbbdeff102e1e85e4d76ba72b1600f7541d596b86373c95aa22fae22cc4544518eb8aa9a0a4028e6ca63a7f9f35d9703df2a8cab18c62ae072f
SSDEEP

3072:vB02L62K+mWvyB7FTUNYBqL1vt6KBIdt7vyB7FTUNYBqL1:vbLb0WvyZ9U1QLvyZ9U1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d135aee6047b211fe05e6732f6be02e4_JaffaCakes118

Files

d135aee6047b211fe05e6732f6be02e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e34a1e0612c070fe7a48ff6b5ac925e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
MethCallEngine
ord519
ord593
ord595
ord596
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord100
ord616
ord617

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ