045d406153439ac565e868c00f4ccd1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

045d406153439ac565e868c00f4ccd1d_JaffaCakes118
Size

212KB
MD5

045d406153439ac565e868c00f4ccd1d
SHA1

5fa1be51b2148a3e7535401b2c343841f0827b60
SHA256

fca03e66f6c3ddc991759db3f1eb14600107fbc97edeb3e8bc447abda66b936a
SHA512

db60703327add2b328965a44c0d42294ea1636faddccf9aceec82ec41ae218385492b4b0cacbe3614a00dc40ed926a715b33e0a8b82bb72bcbae62e352e4b954
SSDEEP

3072:sj0w0ocGfOc94tkkJG7IZ+P55rdRIfRvJ551hwFEfnQizLVf3741S5TAS7/:UHoLDHB4izJf/5TAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
045d406153439ac565e868c00f4ccd1d_JaffaCakes118

Files

045d406153439ac565e868c00f4ccd1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba1430f57612c39b7827021884dc0ea8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord572
ord573
ord681
ord576
ord578
ord685
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��a
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE