14e7dad0eec4121cc6b94bde44605eaa_JaffaCakes118 | Triage

Sharing

General

Target

14e7dad0eec4121cc6b94bde44605eaa_JaffaCakes118
Size

36KB
MD5

14e7dad0eec4121cc6b94bde44605eaa
SHA1

36818a461bcf727faf2cda665c1ca630216de33a
SHA256

2df89bcc60728f9552f48ea3ed89be3e469852a8004e0e46ff14042a63c95a17
SHA512

726e544e537a628fe1909468b781fcdde538c5cd0bc7904f96d7511fc821f3bacf288175a869b6d5df34da6fada85b1d0a2addd45753b7e2c1b7ede59e0f5352
SSDEEP

768:rLT+i64W/igFc69z9RPD26U8rJ9iJwsjfob:ii64EigFcvy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e7dad0eec4121cc6b94bde44605eaa_JaffaCakes118

Files

14e7dad0eec4121cc6b94bde44605eaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ae19ee1bac69da749c5f962e64c878a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord595
ord520
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord645
ord648
ord571
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ