e287db033d9d8c5520de93390ed2879b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e287db033d9d8c5520de93390ed2879b_JaffaCakes118
Size

12KB
MD5

e287db033d9d8c5520de93390ed2879b
SHA1

d2d705623a4c282ec801811298c416e46c83cf52
SHA256

4ff4e1a95a1be7b37e254f73605788040f197073ec5afaab88bffabba0c665ec
SHA512

2b3caef64ffea8d4b826823cbc8688ef17498283b8d344e463969b8a31599ccc0b152954473e8b5e5308ef8bb03d9693c5dc6d838ee8c4e3be8c79bcf12c4ab4
SSDEEP

96:JTHLK8ThS9d+hllWMYHyV55RQFMcJdSH7:ZK8G+Dlzj6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e287db033d9d8c5520de93390ed2879b_JaffaCakes118

Files

e287db033d9d8c5520de93390ed2879b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd1352569303e3b273bd3993f9bd7d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ