42ac1ac6d0c79e79039272138d1110d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ac1ac6d0c79e79039272138d1110d7_JaffaCakes118
Size

216KB
MD5

42ac1ac6d0c79e79039272138d1110d7
SHA1

988477ec7ec905cac829257f0312b9e7367cda77
SHA256

5e2feccb9d2e85cc38316a200b7656246bd79ddbfde853d6f9e83990e5bb683a
SHA512

60702ac0aa13c065a2b86e2bcd60ef6c9a455777481b2c2f2324b709b056568f6c39aed765030fb857343bbc078bd03d88f4fa1d98c87fb0f8211272ea2f897e
SSDEEP

3072:Oo9FIoj00aUOIheoAxwxtCkhNPxBjusotHiu6nN8HBvy+X1wU:vFIoj00aUOIheoA2agNPjmjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ac1ac6d0c79e79039272138d1110d7_JaffaCakes118

Files

42ac1ac6d0c79e79039272138d1110d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc80fc5587e7c3dff3235c1475c28a1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord585
ord586
ord698
MethCallEngine
ord516
ord518
ord519
ord183
ord629
ord552
ord553
ord660
ord667
ord593
ord595
ord702
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord561
DllFunctionCall
ord563
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord717
ord186
ord535
VarPtr
ord539
ord570
ord648
ord575
ord100
ord579
ord610
ord612
ord616
ord618
ord619
ord542
ord545
ord547
ord548
ord581

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ