40093b893b21e587ee98501ed83859b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40093b893b21e587ee98501ed83859b8_JaffaCakes118
Size

580KB
MD5

40093b893b21e587ee98501ed83859b8
SHA1

33b9e2176d3486812a90f0c1a6f34aa9cd3514a4
SHA256

b77b0dc6997dec1450e0b6bfb2c7dd4798d26e6ea5ffaf378d679d3ebf258e38
SHA512

3871ab2a5e085aa76c3d4f5bf832f6ca455f501b9164cb346a029244563cc14e9ccded75760a6e86fa084906e12a715f86c7d0b32862a63325a13c52879461e2
SSDEEP

12288:bbfwpzO5ZFpMHxV3zBHYUOsQJfG9ZR+LbsXWRGzhOx8bUbYs:bLwU7MRV3tB2fG3R8bWWuhWEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40093b893b21e587ee98501ed83859b8_JaffaCakes118

Files

40093b893b21e587ee98501ed83859b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a18eefc1093a5404ba1ef1250b45613

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
rtcEnvironBstr
rtcMsgBox
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
rtcSplit
rtcStringVar
rtcVarBstrFromAnsi
rtcStrConvVar2
ProcCallEngine
rtcFileLength
rtcImmediateIf
ThunRTMain

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sm0kes
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_MEM_WRITE