e7ac10aa07bcabb461d7841fac5cd928_JaffaCakes118 | Triage

Sharing

General

Target

e7ac10aa07bcabb461d7841fac5cd928_JaffaCakes118
Size

120KB
MD5

e7ac10aa07bcabb461d7841fac5cd928
SHA1

ed87985c8be4c0623593ab6be5be3bcaec569a90
SHA256

096205c3ed93906a687499589a39c24a7e144279394ebf6115d28803cb707f81
SHA512

7d73c166cc65a1e96a339e200db50e2dc5ede0215a85fbe6b8006cf9b381164cd41616fa4326cdde5e329719902bb3a312c02aa3569d7583e0f245c8c2b915ed
SSDEEP

768:EemjpNs0Gbq5IcKSxPLmIz6sWo6htjVmoN6xOac2hfksvch68/121T:qB+qWcKSxPlWPh8+abmRA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7ac10aa07bcabb461d7841fac5cd928_JaffaCakes118

Files

e7ac10aa07bcabb461d7841fac5cd928_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82efa499e5098174a68a617f141f9673

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ