ede420a0b2385e796698de595f3ab491_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ede420a0b2385e796698de595f3ab491_JaffaCakes118
Size

24KB
MD5

ede420a0b2385e796698de595f3ab491
SHA1

69d8fe2988b4db79f6645028e6613147b030bf50
SHA256

5de4122a98315dd7888e4e8ec0ef1acc544f1c221174054c8bd1179cf7516e7e
SHA512

67d2196dd992f8643d3f63d0e8dfcff9fe7ff53eeecb18dab8c27522f2479daa767c7b4d3ebda4ab79c8e234310b728b25329130f105884bac17177847198bbe
SSDEEP

384:F+/aag/ZyQWE8Mjt+ZFKXK1MprIqWykk:aDg/ZFWkjtcFKXKQrU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ede420a0b2385e796698de595f3ab491_JaffaCakes118

Files

ede420a0b2385e796698de595f3ab491_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d109fbdd9036994a9279258a0c91730

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord660
ord595
ord598
ord520
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord534
ProcCallEngine
ord537
ord645
ord570
ord648
ord573
ord576
ord100
ord610
ord616
ord617
ord619
ord650
ord546
ord580

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ