edb66d3b1c63f4319fc452d1b4d06236_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edb66d3b1c63f4319fc452d1b4d06236_JaffaCakes118
Size

312KB
MD5

edb66d3b1c63f4319fc452d1b4d06236
SHA1

0b3d89e57127cd87ea85c556c4c6214d1041db2f
SHA256

39e597a2c3196b888f58b163bb478ccb1c83ff9da7bc4a9576159d75b1ffcf35
SHA512

fdc70716749bb8cd6aef55a9ed6293164b8a3570d5f8a2b0868737947eb0d3967d3ef29a1fd33f3b01e1c0a81ae738424d2e2b639ea1133c1d3d146f4f8ca6cd
SSDEEP

6144:7F78ZvTlIpr1f+XqO5aOmSGFDbeOjLPmUEgn:F8pTlIB1f+55SpNPmUln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edb66d3b1c63f4319fc452d1b4d06236_JaffaCakes118

Files

edb66d3b1c63f4319fc452d1b4d06236_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e14d8ab77a7e29f6cd12e014eaa81a38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord665
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ