0712be49767ca8899728a72e312a71bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0712be49767ca8899728a72e312a71bc_JaffaCakes118
Size

284KB
MD5

0712be49767ca8899728a72e312a71bc
SHA1

ea92bbacc6dc0d139f612047aeff800e055f72e7
SHA256

eaae93e88017d44b4b96790fcc9be5628ceb6de030944c1b9254d4e29cc6833b
SHA512

e32710c14393d3109eb5f1d7a4b9b7281bf39593a47c986d0a8cab39013210b78a09c25981112d95ac182727bad8e219303e6bdf42a62697ebdd4886d63dd7d7
SSDEEP

3072:h6Lca+56U04mw49Y3r1suFiEIN1suFiEIAO1m1TPK:tzFByzFBK1m1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0712be49767ca8899728a72e312a71bc_JaffaCakes118

Files

0712be49767ca8899728a72e312a71bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49fc08656f9ffcf7a0fc294258ef56bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ