04eb8591694cc51951c3ae3933798853_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04eb8591694cc51951c3ae3933798853_JaffaCakes118
Size

81KB
MD5

04eb8591694cc51951c3ae3933798853
SHA1

80405f3bf8320d55f2311248caf24c9d40675fde
SHA256

dc98657481dc60f77f95e16f2539460396ceaf1de6b739465e09ee40472b771d
SHA512

25456ba35f092368a89991e83973caae04f19083e329ff1327331db0c511c9a0e3a412034164f98f0a740376d9ed1a3521d5dd67e933e8016e15b1bfcce5c35d
SSDEEP

1536:y+hBrCxc89yKqsfAD/L6TlwDBWgjXqv1AkRAXn2ZvpBmiQ9FHd3k8PY:bhBoyKqsiT65IMA8A4AP9F9hPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04eb8591694cc51951c3ae3933798853_JaffaCakes118

Files

04eb8591694cc51951c3ae3933798853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

254e50b36a4c80cefadf52e3b48fe326

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ