da2b4af5a0b42f9a44d7626ebd3d8742_JaffaCakes118 | Triage

Sharing

General

Target

da2b4af5a0b42f9a44d7626ebd3d8742_JaffaCakes118
Size

448KB
MD5

da2b4af5a0b42f9a44d7626ebd3d8742
SHA1

9a8fc4f5ce849aefb821879756c053c71457c64b
SHA256

383bbf664ed9d3f2ab1205dd2f8d17e10fed9bf32955cbd5f3da2fe91c19633b
SHA512

7b6adac2005133872bebe1b0c334b3ed887c9138de75c5949c29b8e0384adab802ccfa4c7ac88c494fe4b0b23c2f6f1539469c7caf09e5173fae813e1295f802
SSDEEP

6144:C7Nhx8j/YE74yIEhIMm9RtJ75w3H/PAO+Czuossi53RXo2UOacZlR9tIcTmpjN:C64yIIGjNUHHAuuTsiNRz7acZlOHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da2b4af5a0b42f9a44d7626ebd3d8742_JaffaCakes118

Files

da2b4af5a0b42f9a44d7626ebd3d8742_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcf42e1a14110d3a3ae762809131a6ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
BASIC_CLASS_AddRef

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ