eb10ddabb1237ef988042fbc1d263e14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb10ddabb1237ef988042fbc1d263e14_JaffaCakes118
Size

48KB
MD5

eb10ddabb1237ef988042fbc1d263e14
SHA1

81f695748f6f99740600be993dd6fa31d7a45f42
SHA256

e8f91b41b65ddb063dfe5dc43f4675f9376f3dc0426cd419116539c186ce6c24
SHA512

6ad0d8db599126c3a53e523aeba9dbc6a8762b1f6bb131a35f412f6157918fce31d6f469022875d475ef255dbf5a648abf9db7b7b6b1c9bc46a1727ede01c889
SSDEEP

768:IksqA/+8MxChHjhpNuoTAgmY5LpC6XT+na8vXFuFIF/FmFCFfOKC:I9+1xK9pQoTA5wdC6XSa8vFuFIF/FmFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb10ddabb1237ef988042fbc1d263e14_JaffaCakes118

Files

eb10ddabb1237ef988042fbc1d263e14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2133b60259aef40513cb52a04b271d22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord594
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
ord670
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord100
ord431
ord617
ord619

kernel32

ord480
ord340

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ