19ee7a659f6ea1aa40d53ec52be2fe89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19ee7a659f6ea1aa40d53ec52be2fe89_JaffaCakes118
Size

40KB
MD5

19ee7a659f6ea1aa40d53ec52be2fe89
SHA1

8643efd88e0c32822bb80a4eb285af3ed177b7fd
SHA256

3ade0817da9cdc5bbcdbed3b3705c17b30336546033f4477b21a1f35da641da1
SHA512

7e37ab47383a1b5b6fea752ece3271e25cb8cbd8f3690bd562fd907652db25e23bf77e766dc57fb80e1db81dd49f12beddefc3225d7f7b358ac5a05f046bf4c5
SSDEEP

768:OKYFrO3JWZeYLCVqwu86LEo4zroVSNokb7A1aVvlUO:/8eYLj3PVSC9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19ee7a659f6ea1aa40d53ec52be2fe89_JaffaCakes118

Files

19ee7a659f6ea1aa40d53ec52be2fe89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebdc8c51edb8f7609de451d8fab164ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ProcCallEngine
ord535
ord571
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ