940fe22290d7df77df6fb8a812f10a89_JaffaCakes118 | Triage

Sharing

General

Target

940fe22290d7df77df6fb8a812f10a89_JaffaCakes118
Size

1.8MB
MD5

940fe22290d7df77df6fb8a812f10a89
SHA1

1f7f22375f5f4f65f51a610562557dc4cac58c69
SHA256

c1c54c1b7341d1869e35fcf70ddb13e3d47420f5011e33646933bf76524163c0
SHA512

9d16af324da0741ff0ae6dbdde6d08a1b9c119dfb5d64ec53e3c5f7bbd3ae2a013895c7ab0a551f23d78d8dd92b08ff70a62e2541ce3cb6aaa44843dfdcc3029
SSDEEP

49152:xc+cQ1iqpeUPDzvSn6kJHveVaq7Ipitf:eIiqpe48bq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
940fe22290d7df77df6fb8a812f10a89_JaffaCakes118

Files

940fe22290d7df77df6fb8a812f10a89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

918ba95edd4f1eb3918cb985af590469

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord517
ord519
ord598
ord599
ord631
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord681
ord685
ord100
ord616
ord617

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ