dc1af42dbbf47d46c878ef9bbbb82878_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc1af42dbbf47d46c878ef9bbbb82878_JaffaCakes118
Size

48KB
MD5

dc1af42dbbf47d46c878ef9bbbb82878
SHA1

28e3730e95b8978d1dde617aaf87772cf79a2c39
SHA256

e1a0b5bd174cb6bc27349c6e8654f25d467e9fe1e12e8a6c3d52045323556542
SHA512

2e0db1f15e0c5905b3b7fe1038d3708323c148a4bba375338872fff45f49980704417985d7acc12eb34e0d10d17cbcb92933bbbbc0b9fd599ed7b2229eb7436a
SSDEEP

768:7Rfzj8PHBI7wZ7Cde2LA6ghwTRaDVsxDNjy/D+svNRyrhP8ouSr8r8z8r81Ab:7Rfzj8PHhP2LABbDVnDrSrSGSwAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc1af42dbbf47d46c878ef9bbbb82878_JaffaCakes118

Files

dc1af42dbbf47d46c878ef9bbbb82878_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c9023363f6c27ec76f14e632c140822

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord595
ord520
ord709
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord537
ord644
ord681
ord100
ord579
ord616
ord618
ord619

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrca
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.rsrcb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA