463b3af6d19ddea879079c9a43a3dffb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

463b3af6d19ddea879079c9a43a3dffb_JaffaCakes118
Size

308KB
MD5

463b3af6d19ddea879079c9a43a3dffb
SHA1

76f3faf7793e6d9ab284bbf160982916cb052613
SHA256

f2d0f1366fbe1d27b4561d27175a529edb9720ccc5fe9eee096aa437c9f8ac66
SHA512

f02e030f8e72b9396d63ddb19731cf282363419f54d2c5af889fffa91449a8d6392ac61d86086f927e8e82237e64e25aa1f1d6b484e138f0bc09099bd246e3e9
SSDEEP

3072:j+qZ/d2uJURI1a9rWpR7M7w2qsw8xXBNZRt8xnO:R29U7208/NN8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
463b3af6d19ddea879079c9a43a3dffb_JaffaCakes118

Files

463b3af6d19ddea879079c9a43a3dffb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c9a222b10e43e8d737b45dc1ce369a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord517
ord519
ord628
ord595
ord598
ord599
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord573
Zombie_AddRef
ord681
ord100
ord617
ord650
ord581

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ