d409c507cc255ab54fd327a7dc9839c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d409c507cc255ab54fd327a7dc9839c5_JaffaCakes118
Size

785KB
MD5

d409c507cc255ab54fd327a7dc9839c5
SHA1

963961c144bae28b5456f2472d916ce8f107b39d
SHA256

169a3617e5878c4f71fde00a57af395dfce791e5efa0d4c40a19eaa5dee2816e
SHA512

506849dc2a44805f6eea79ad793241d65f8972bfc76fa64a2bab6ed5d48b45100d16567f33fe3e0abb31bfa4d0d5b8e9b4f9a7a5259f0a2deb61928a597701a8
SSDEEP

24576:4Mt4m4xBUtI8nrmNDrOsbtwsc9eJGb2a27OpOs:jt4byb+SsbasdJK2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d409c507cc255ab54fd327a7dc9839c5_JaffaCakes118

Files

d409c507cc255ab54fd327a7dc9839c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e0d71e104868301cc5c1131b6a46941f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord644
ord681
ord100

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ