d4eb7967aab05f1edeb64c09b48101d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4eb7967aab05f1edeb64c09b48101d9_JaffaCakes118
Size

36KB
MD5

d4eb7967aab05f1edeb64c09b48101d9
SHA1

2ba2ebaa8c7484385805826b12784054f41c0be9
SHA256

effd87698292a19919dd006d758741341ff8743647a0266c8fb7f43ed5f22b43
SHA512

f2c9fc6d02661123842b86a7467e387b77b2600d078ef0f6ef06d70b7cd09d7884272c69ce679011eea2dddc52e3eb8f1b80999a51aff131f15519a12ad3d279
SSDEEP

384:1n360erQAv8OT1IIi5M+mRz67admDjpFKrYutShpSIr966TIw5k0O3C/:3erB886Ii5M+mRz6fDjpFKrYutYO9py

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4eb7967aab05f1edeb64c09b48101d9_JaffaCakes118

Files

d4eb7967aab05f1edeb64c09b48101d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68af3d26b5c2bfa06a8d70f2dd1dee8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ