42e7bbf3e74c2c5a3980c06937d89bb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e7bbf3e74c2c5a3980c06937d89bb9_JaffaCakes118
Size

792KB
MD5

42e7bbf3e74c2c5a3980c06937d89bb9
SHA1

30c56735b55dffd1a33e46e5102443479a8b0efb
SHA256

7467ad7c3a8a9309f7a1f78bdf9c322d00f7f659d87ac0baf471ed24a1720c64
SHA512

794ad03d28b36c0dc7346211b7b37d5b1a3e304f75d060e2a200de774c800d30a4be6964b0ab7ad62b4f6c72dbeb00eee16a4a6ec2575ec330768240cf3cff4e
SSDEEP

6144:TUXxEw3aJPygsKykg7UCesKgXxEw3aJPyb:YBEwKJqv7UyBEwKJqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e7bbf3e74c2c5a3980c06937d89bb9_JaffaCakes118

Files

42e7bbf3e74c2c5a3980c06937d89bb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

032cf52df9e02599f8bc33a6b11de421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord572
ord681
ord685
ord578
ord100
ord581

Sections

.text
Size: 424KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ