0eaee6d8db6e675bff36fb6a224fe9a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eaee6d8db6e675bff36fb6a224fe9a4_JaffaCakes118
Size

60KB
MD5

0eaee6d8db6e675bff36fb6a224fe9a4
SHA1

a275f6ca13febc2ef5aedf9dfff40b2e46ab2ee9
SHA256

921650cfbcc431b54aa43e6d7f14729039e9c6042867bb9ab185ccfb16091975
SHA512

43cf9d0ca777c6df1d66bd86422f937ed49f4db608ce18c4315087b145a73568161acff464ce92fd1798d0b9e3a11dbf6e4dd957d3f356fccb327362bd839966
SSDEEP

768:hTVhsXnuOdYbeeq3wgC1GXl+pG368PMqMSKNz9cR/RsrXFUyX9m2G0gjPA:h3OevgoGVN2v7a/RYnXUwgjP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eaee6d8db6e675bff36fb6a224fe9a4_JaffaCakes118

Files

0eaee6d8db6e675bff36fb6a224fe9a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11066834ccc0b24021370e0d19333194

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ