0e4d7796b73b8911ab9ff9f2c9fe7388_JaffaCakes118 | Triage

Sharing

General

Target

0e4d7796b73b8911ab9ff9f2c9fe7388_JaffaCakes118
Size

20KB
MD5

0e4d7796b73b8911ab9ff9f2c9fe7388
SHA1

ca0a52a822c3ec10b507378b9353456317f6e5a2
SHA256

94da81129333815e5b72dfbceb2c96dbcc30d81442005df30ca171f0c1a22dfd
SHA512

ff674a2b97ef450f0022dba8b08e2737c4f6805b773c3aa41cdc3e218ea5a0ebcd2c7e72f647a0320d366041d46ac20c7792bec63a121ecc625bc532134acdc5
SSDEEP

192:GeWiakBYmLD7dvUjsVwzQdzj0D4HMbkTw/gPoX8rsrX5YX:G9yLX9UjTIICX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e4d7796b73b8911ab9ff9f2c9fe7388_JaffaCakes118

Files

0e4d7796b73b8911ab9ff9f2c9fe7388_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cce5f5d2a43c99743879fd932e869975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ