0432989f3b581d4cdd6b65bd67d8a8b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0432989f3b581d4cdd6b65bd67d8a8b4_JaffaCakes118
Size

104KB
MD5

0432989f3b581d4cdd6b65bd67d8a8b4
SHA1

7797896b27496ea3fe6f32b026b195bc9ea87c1b
SHA256

c5e5be243861d78e707054ca2282389aeaaaa5285fff283cfdf2931c5815255d
SHA512

8ce4b59b66aa5987e34405793cf4764f3921ef73e772319f05c88d86a4121cdec54607e374575bfe6a705d74a23aa2fee9aad54fe1ea11ac3bac27a2c2348163
SSDEEP

3072:XojAsK2u0qSX0mTAQoew5XKPuxR2W63Hdupt:Xku/QA3ZKmxR2NQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0432989f3b581d4cdd6b65bd67d8a8b4_JaffaCakes118

Files

0432989f3b581d4cdd6b65bd67d8a8b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.
Size: 272.0MB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ