1849b5ad93ed6c753ec8f1e6b2e393f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1849b5ad93ed6c753ec8f1e6b2e393f5_JaffaCakes118
Size

116KB
MD5

1849b5ad93ed6c753ec8f1e6b2e393f5
SHA1

35f83d9f24154c60ee473050f76e07fe6171108c
SHA256

97cd11ec8448595906b09d0fa063db47b5f5e2809bc7ce0d72afddc598a182c7
SHA512

1e7c6d86d318d443ac6c5651c0c9e3a90acbc758bbd84c35217fb4b3e31eb2b8cfde6ed9ee6a918b5917d532e6990d9e41e856acc8db04f009472727c073d90d
SSDEEP

3072:nqVJKOg3nBmn/QdzH/JrUh8DTxMZbFHPf:KJk3QizHbGP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1849b5ad93ed6c753ec8f1e6b2e393f5_JaffaCakes118

Files

1849b5ad93ed6c753ec8f1e6b2e393f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99a5b374084cafb2a20b1f9abad0d8e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord520
ord522
ord631
ord524
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord647
ord648
ord573
ord681
ord100
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ