4578693fb07c6fe55cded28f9a5d1fc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4578693fb07c6fe55cded28f9a5d1fc5_JaffaCakes118
Size

200KB
MD5

4578693fb07c6fe55cded28f9a5d1fc5
SHA1

48aa3ddd2690c17855957d8944ec6a655ff83189
SHA256

ad7737b5613b3acaff0564b5b912a653d125035de71038a20bff784620b40717
SHA512

63cc7723b098fff00af88b75eaa8d680ee1c836f46ddd4ce0a39a829ba263b9bc2273f1e32034a50cafb7c910248858665411af6b05a96258b58faa77262069c
SSDEEP

6144:MhKeLZ9eV0bjErWck6VZ+6W+6Nx/YZOWQQ+i27F0qqOV:MAieVQYrWck66kQxAOWBa0qzV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4578693fb07c6fe55cded28f9a5d1fc5_JaffaCakes118

Files

4578693fb07c6fe55cded28f9a5d1fc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f77eaa3f504ab27e24b6faa91dd7e80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord685
ord578
ord100
ord616

Sections

.text
Size: 11.1MB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ