d1a8043280ebb209e9d1b07098d1d4c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1a8043280ebb209e9d1b07098d1d4c4_JaffaCakes118
Size

156KB
MD5

d1a8043280ebb209e9d1b07098d1d4c4
SHA1

b307572ed808af9e00f06624b0d64fcb2b939a9d
SHA256

6289e3b69e198c8fda98840930b340ff9b45a06da3eda362b9cc4ef0c128edcf
SHA512

a8fd1a989cd52733f277cd3263eeb4eaf94bd1e914ab6b4d2855f57486c3a2fd456b6852df63b2be920af703ddf864e303055e9257255619180afd4319a45906
SSDEEP

1536:RBI+tIVXK+QmlHE79W22FPeOnD7IgfFc8M:wg/Y+7IXdeOnDa8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1a8043280ebb209e9d1b07098d1d4c4_JaffaCakes118

Files

d1a8043280ebb209e9d1b07098d1d4c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4aeb6b7783ee31ddee752df40e959766

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord628
ord631
ord709
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ