ebcc070dabb2a18839bac219fbe4e760_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebcc070dabb2a18839bac219fbe4e760_JaffaCakes118
Size

24KB
MD5

ebcc070dabb2a18839bac219fbe4e760
SHA1

4218a40dca6eb55ff577c596699ca4f33c09e926
SHA256

49a3cfaa2f2eabf251ea8f94c2c252acbc48379f9ac262a269b185ac98c4114f
SHA512

9a1be36c6a4ef0bfb8aab29ba284fe1627668f02b9301c58012768433abc08d4e99810b05bb28b4c4e5fff66ab9c0626c0bd2ab8ed07865f49b930d5ae0f017d
SSDEEP

192:PxENzNVdj6VLzHAzMitX9ukCFXj1uJKoR9oNKDDTLvFUE:P+NZSLbAzMitNIle9ZvFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebcc070dabb2a18839bac219fbe4e760_JaffaCakes118

Files

ebcc070dabb2a18839bac219fbe4e760_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cce5f5d2a43c99743879fd932e869975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ