d4f46f3757d03eb21f21b00ff27e475b_JaffaCakes118 | Triage

Sharing

General

Target

d4f46f3757d03eb21f21b00ff27e475b_JaffaCakes118
Size

1.3MB
MD5

d4f46f3757d03eb21f21b00ff27e475b
SHA1

1eada9e3ed08e012bd5a4f6cc84aa1a19b727989
SHA256

7f0e3ae00951dc81b9546edd388e0f39357edbeb080a46333e8ba19c4c4fbee5
SHA512

fb3e5319bb5f7e145aa62734be4d1d2c69d2215386598aaf659d9ab7a5df9cdaed5e3d1d401e95836cd1dbf2a387d9b06b9ee62551fcdd915459309cb0fae40a
SSDEEP

24576:TBha8a9X2bamZR7ErHQ2+9637HwQqiy0CuR5DB40X+MXJuEBRwqcs2hvpKX:TO8aTImH3863TwQqhZM9lvcQzBX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4f46f3757d03eb21f21b00ff27e475b_JaffaCakes118

Files

d4f46f3757d03eb21f21b00ff27e475b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db54f68d77c5c01a151a206399fdd0c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pstorec

PStoreCreateInstance

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord667
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord571
ord572
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ