e7305e1f7b5d9fd33bbce7f3e2249214_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7305e1f7b5d9fd33bbce7f3e2249214_JaffaCakes118
Size

20KB
MD5

e7305e1f7b5d9fd33bbce7f3e2249214
SHA1

aa9389e76503f0778d4d2988588208fe978c3bfc
SHA256

3bf7f6e993aeffd4aef61e7ca4e8da00a47ede8b0c7bd755fd239018e7973624
SHA512

80417b475611e09845d0e40cd9956b9e6645f117c5a9038148538815693264ca2c317a781e8facf04c5e0fe72bc31fb4f333402e76e4150cf576de53859171f1
SSDEEP

96:cWrbzUgLF4t9yl5Ogta7SCl1+9EkCIHeW7oX3wsDQ/0Xh0Yetk33kcxOW8mCVB68:JjUgLovSso9EWHn7tDMERdmCVI7cBUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7305e1f7b5d9fd33bbce7f3e2249214_JaffaCakes118

Files

e7305e1f7b5d9fd33bbce7f3e2249214_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f75390370eed681495f1835b459b8faf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord576
ord685
ord100

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ