14732bf8fe83d6c3f206bd145fa27f0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14732bf8fe83d6c3f206bd145fa27f0f_JaffaCakes118
Size

460KB
MD5

14732bf8fe83d6c3f206bd145fa27f0f
SHA1

d3e2f1b7f00d97037970a0d7caf5c6475753fc6e
SHA256

0e6a64054ebda5df37162fbe82381677adf8ba2cc560d63b0a5d8327e55bb280
SHA512

b084e1a7abf21d046ff9ed54f279190cb03c5df92b8ec76cd7befc0e7c687c026fe3999a058181674f8c48fd1f349ee27d411ab6c7c104ded8253fd3bb07bfc2
SSDEEP

6144:q1v5sC1U0cgXNZsQKVYVxIeyp7Qub3ST/tAr0sAN0GEmCT/tUTpj4cPevnsdA:CGcHPsQK4xh43D+/tArtAeGEmChHvYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14732bf8fe83d6c3f206bd145fa27f0f_JaffaCakes118

Files

14732bf8fe83d6c3f206bd145fa27f0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5575dd531490b73f5b7945431df1364

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

msvbvm60

MethCallEngine
ord665
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord644
ord100

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ