d4e4f1d0ef9ff693f7fcdd7e4aa53e56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4e4f1d0ef9ff693f7fcdd7e4aa53e56_JaffaCakes118
Size

109KB
MD5

d4e4f1d0ef9ff693f7fcdd7e4aa53e56
SHA1

14f7eb06d18d396606657eea6bde1e5603fd60ef
SHA256

71759bc4374194b24d747c3309648ef23c4953fb729247bb17e66f3159aa7f07
SHA512

862b49fdd21fe621678e15bd6115904dfaa538bf44b244f664761ab19148d958c99b537b719bf5b96f3681f537e0e48c35ef12060c42a23fac0f95c83facfd3e
SSDEEP

1536:Enqdu3abBGy3GEV0iuoKWGq6KfFkWGq6cjTA:EqhMPkKWGqFdkWGqzjTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4e4f1d0ef9ff693f7fcdd7e4aa53e56_JaffaCakes118

Files

d4e4f1d0ef9ff693f7fcdd7e4aa53e56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8767f78a3f29bbe05ebe31e0976cc66c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord553
ord669
ord593
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord717
ProcCallEngine
ord645
ord685
ord578
ord100
ord579
ord616
ord617
ord619
ord542
ord650
ord544
ord545
ord546
ord547
ord580

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ