aa188e8de290ad00f01c69891586c961_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa188e8de290ad00f01c69891586c961_JaffaCakes118
Size

628KB
MD5

aa188e8de290ad00f01c69891586c961
SHA1

b8fb0c644d8b35c51d80b41bc0a9c44c7c10ce2d
SHA256

5a9ab507d81d5ee2df85910a76725e65d1eeba610759dc99702ac37602169d9c
SHA512

d92b93c3800cd281f3fbd0c9216d4359c2d49448fc7002a03221131b256d34f456da76495d335432da23be93a79f745d6c18367eba1738b58ff507f9ca6ebbff
SSDEEP

12288:jfWKkHbW/Dg+do/BUovE9u+Z8XQLAscA67mcyg22J3wZz6HUS:jfWE/ZLovs6scA6ixgd3qzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa188e8de290ad00f01c69891586c961_JaffaCakes118

Files

aa188e8de290ad00f01c69891586c961_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f2402b735d93cb8f2257153099a7b7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord589
MethCallEngine
ord515
ord519
ord556
ord664
ord665
ord666
ord667
ord592
ord594
ord702
ord703
ord633
EVENT_SINK_AddRef
ord563
ord672
ord675
ord568
ord677
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord530
ord716
ord648
ord571
ord573
ord684
ord685
ord100
ord616
ord581

Sections

.text
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ