f9d5d9b27d1a487068ee5c01328c3b30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9d5d9b27d1a487068ee5c01328c3b30_JaffaCakes118
Size

283KB
MD5

f9d5d9b27d1a487068ee5c01328c3b30
SHA1

ee76d0427a232a7c89793a2d4af99d2640e3f23c
SHA256

1a682b551f48ad6350693defbb1048b6101df782b951daac0b6fedd28e819312
SHA512

a275ffd35f639c66d30f535761567b1db83f27706d33f5520d51d7812e757f0f8569fa557afda2397c6bac7cdce54e0c277303dcd930066ab65792c51f0ab44a
SSDEEP

3072:qPt49QG2Hq1l+ksigNEkVez/daFYMKK7tBD+Cd1aBrwJN75urekwUEeHIym5l4ax:W5s7MH/+CDJZUE2I9rHqq9tzv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9d5d9b27d1a487068ee5c01328c3b30_JaffaCakes118

Files

f9d5d9b27d1a487068ee5c01328c3b30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d7606b0ed2d1c2c29d9cc3ac96d3d5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ProcCallEngine
ord644
ord100

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ