ea9544f1fdb25751ee3f776b03d6b203_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea9544f1fdb25751ee3f776b03d6b203_JaffaCakes118
Size

256KB
MD5

ea9544f1fdb25751ee3f776b03d6b203
SHA1

90713eefb706da7a5e62bdf8490e6777378f9040
SHA256

52f2724170f8b560dd4d3d193077dc0d37b927c429fdf60555bd96f0d2491284
SHA512

62a57f91b2fffa78237d35481d36ec69db6bae094f1c36c41b27290153012270ea33505952f3c63adda3a6e4def57c48ff6e1c0aa99d4dd9b69f682eef23a1af
SSDEEP

3072:eQtn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E48:eh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea9544f1fdb25751ee3f776b03d6b203_JaffaCakes118

Files

ea9544f1fdb25751ee3f776b03d6b203_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90c101c1a8e9e6bcdd3ea60252fb45e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord518
ord628
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord578
ord100
ord617
ord619

Sections

.text
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ