ea0e523aca2d301838f1df4f0fcb464b_JaffaCakes118 | Triage

Sharing

General

Target

ea0e523aca2d301838f1df4f0fcb464b_JaffaCakes118
Size

80KB
MD5

ea0e523aca2d301838f1df4f0fcb464b
SHA1

bab1eb7b7497fa4d2997e34a60d24e4796fed638
SHA256

e729530709ae2f763b0a7a6f6cb1605fdf600ea6e624057cf989760fa1d33041
SHA512

9182a4b143081129a153aba8ce6a6bed445a961261411c88390ffc3d7ea0fd9ff8caebcb9b309201ea6108724230b27eff6d162d54e23cf9adfc01213040a802
SSDEEP

768:3Sm6EKgGZzpTbM2y9tZiBMc1e7nIhNtI6i6J1KiSKsPM6c/voU:epg/pbLiSKsPMd/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea0e523aca2d301838f1df4f0fcb464b_JaffaCakes118

Files

ea0e523aca2d301838f1df4f0fcb464b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6f8a9b3515887dd4f88b2b778962b6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord593
ord594
ord631
ord526
ord529
DllFunctionCall
ord563
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord572
ord573
ord578
ord685
ord100
ord616
ord618
ord581

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ