ade3004d4bc9a5bcd83561396d724453_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ade3004d4bc9a5bcd83561396d724453_JaffaCakes118
Size

56KB
MD5

ade3004d4bc9a5bcd83561396d724453
SHA1

bf2c22e51bced0e01d6885bf24a2c05e5d6f83d2
SHA256

cb3d29d35bc9078bd8c961da3fd3fe486f211adfaf2086375d1bc7d098461d8a
SHA512

992b834980ffff2d03f6221229092380789740d5c837498ba0c51eb5e72ca2c0d57ba4f60ad0698d804e9edba42fc4880d1b8081b7361e6aa5f26bc55fa027c5
SSDEEP

768:3Mt2IF1XIDQ8tB0/L1IoxFUwrSWF1mYnZjd/:3Mfpz1nx6WDPnZjp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ade3004d4bc9a5bcd83561396d724453_JaffaCakes118

Files

ade3004d4bc9a5bcd83561396d724453_JaffaCakes118
.exe windows:4 windows x86 arch:x86

311e926d8849b1b88bf3d6ab427e47be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord629
ord666
ord591
ord593
ord594
ord596
ord702
ord598
ord523
ord633
EVENT_SINK_AddRef
ord675
ord569
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ProcCallEngine
ord535
ord570
ord100
ord610
ord618
ord619

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ