d49f874481fbe8ec790e03a270e55e8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d49f874481fbe8ec790e03a270e55e8c_JaffaCakes118
Size

24KB
MD5

d49f874481fbe8ec790e03a270e55e8c
SHA1

02a4017fe3b1cf9f0247665fedf6dc908a8c7ca6
SHA256

12350219b566f8f882820008932c126d1ea43766c234ffd3eb698f8a3c0698b5
SHA512

152335dba1dc046ba1698dc16cbcdb0b6d5f5c3b8283173c7cbf87b726c8e062a183634cb75027fccb684d8aaa039c237165e1a49d443d7d9f4c39a81ffdaf72
SSDEEP

192:cpR+Gvywx7OgMVEisbpQhEuM7sc0TfjyxtOrgQgtwEjBvPf1jufItepf:avog/isbChI3wIH9juMepf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d49f874481fbe8ec790e03a270e55e8c_JaffaCakes118

Files

d49f874481fbe8ec790e03a270e55e8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3accf752917c7298a4eae1a3b0dbce65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ