46434e2e8edf9e5d1752c3908d124972_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46434e2e8edf9e5d1752c3908d124972_JaffaCakes118
Size

36KB
MD5

46434e2e8edf9e5d1752c3908d124972
SHA1

262c9833740c5e14acdc841ee6dc766559a2c683
SHA256

ea833f97ccc5efbfdfcf00826d5b2e89e418ef1c8f73e91cf0eacea86f06c704
SHA512

57fd03d50b3249bba5d0414b26c79c1967ffa08c605add6d5f8462418889bb5c56b537010812668c97df74e7ef7c425b14cf930636caee540bb9b1ce1fc64e18
SSDEEP

384:ic2HOo97fkDASlJc5IB1dBx2SGct9JcInp5wyWq2BzSQEt:F2HOefk8NvSGctDL2Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46434e2e8edf9e5d1752c3908d124972_JaffaCakes118

Files

46434e2e8edf9e5d1752c3908d124972_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb9ab72ab5a1138ce053318c41dfd3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord660
ord598
ord306
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ord318
ProcCallEngine
ord644
ord570
ord648
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ