d4478dd7818724d4b09be6fc0b7e2d07_JaffaCakes118 | Triage

Sharing

General

Target

d4478dd7818724d4b09be6fc0b7e2d07_JaffaCakes118
Size

36KB
MD5

d4478dd7818724d4b09be6fc0b7e2d07
SHA1

9697cb39b80b96f2ce5c5b4d21b5216b31d878eb
SHA256

dac2ea1fd00a8ccc050a19d3cac9746cece249b2c882dbd61f4b5a7adaa9f50d
SHA512

72d8dccb8cea5bb22cf8c1ccb350592e10d7ce847748a6aabceaded833affda555e863ea7eea7e3040818fe8bbc92beb941f7fe9d92691e89bf4dabdb553f16b
SSDEEP

768:97+M7kuaqBDtexn5MeVXJSKz6bwoFKrYutkOweh:Z+lrUu06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4478dd7818724d4b09be6fc0b7e2d07_JaffaCakes118

Files

d4478dd7818724d4b09be6fc0b7e2d07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bab709d462353166ca51d4deb27073f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord595
ord598
ord631
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord715
ProcCallEngine
ord645
ord571
ord685
ord100
ord617

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ