09a3d55ef8e75833f616b49a41fdb2b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09a3d55ef8e75833f616b49a41fdb2b7_JaffaCakes118
Size

120KB
MD5

09a3d55ef8e75833f616b49a41fdb2b7
SHA1

4348c7dd1a52e834c7be030899b25cb6cee45dd7
SHA256

3b6ce1c9d220eec7ea9976bdaddc64a8602c75649518996c34f219e413884d93
SHA512

74595a1825ed2b187c9bc7f82fc64bd58fd2748e475ef176d899010ec39ee2165375b00207a37f757c9ba6d9e175ab8478a6848bb48e7289579783e3f66fbbb8
SSDEEP

768:g4CEPH4FGC5Ic1SxPLmIz6sWo6htjVmoN6xOac2hfksvch68/121p:K2WpWc1SxPlWPh8+abmRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09a3d55ef8e75833f616b49a41fdb2b7_JaffaCakes118

Files

09a3d55ef8e75833f616b49a41fdb2b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82efa499e5098174a68a617f141f9673

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ