1045528d0da18b9764bbdb4c608a6eeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1045528d0da18b9764bbdb4c608a6eeb_JaffaCakes118
Size

96KB
MD5

1045528d0da18b9764bbdb4c608a6eeb
SHA1

adfc23a187038fb904addc1fb7739a72cc814c04
SHA256

c952336f723f4d318b1121fee7f97b6e789da00910b9ee84ade266fee97f5600
SHA512

f54789549688146eace9cc99bfc42c29da36861f61d8523b1cd537dbc69da21a3929987a606feded7f11b09bedb8b0259e907467cba5954094db04be92a38c20
SSDEEP

1536:CDCWQ3noIhgNG5Wg5Nci4iXMeiqkpZ3+ic/4xt2pbeD+rvCa3sIDbzOZm92Hzj9a:CPQ3BbxzobLonER1aT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1045528d0da18b9764bbdb4c608a6eeb_JaffaCakes118

Files

1045528d0da18b9764bbdb4c608a6eeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9eff08e5b09708627809ffb099042ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord669
ord592
ord593
ord300
ord594
ord303
ord598
ord306
ord520
ord309
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
ord562
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord314
ord606
ord315
ord607
ord316
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord648
ord571
ord573
ord681
ord685
ord100
ord617
ord619
ord580

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ