15ae4943607206c8e7df7b456e1c0c7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15ae4943607206c8e7df7b456e1c0c7d_JaffaCakes118
Size

312KB
MD5

15ae4943607206c8e7df7b456e1c0c7d
SHA1

31b35d8b95cfede5ae7e3486069107375634a0b5
SHA256

7e4d1a72f2ef275b5de91161aee680c569f2b4ec80e69baaae65d7462d6c0f0c
SHA512

38ec9a7e9b94aac6dca79b1caa0c14cd6543d52d73ad031eed51662303852c1fe916645c14c4369db61667aff727fd372607de1cc078672a21bc8ec5e2603ce6
SSDEEP

3072:vHFwr2jtgUH1pfPC8gyCmT8PThARdSaL:vcTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15ae4943607206c8e7df7b456e1c0c7d_JaffaCakes118

Files

15ae4943607206c8e7df7b456e1c0c7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4a289484d0a71b50d339fb271df2be9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ