1a39ae49ab134d3e3ec4514c6ab4b08e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a39ae49ab134d3e3ec4514c6ab4b08e_JaffaCakes118
Size

53KB
MD5

1a39ae49ab134d3e3ec4514c6ab4b08e
SHA1

5021fc0166b2bc641acd7436e06bf828b2814102
SHA256

b17a3b951760f69876a342e2ad5b9e17de78a72f6acb1d1598a4b9720a3c42a4
SHA512

3b2adccaab97495bca7f4b1ad0a46a05bf0e5bfcb88df8cf7bcf9505ba2cdd2c443e7c738569e232360ebc1a8b84e7c7a0beb8aa83fee6538bf5d47bce9957a0
SSDEEP

1536:HNeog8r8Q6bs0Dw7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:Ks0DwJJjmLM3zRJWZsXy4JN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a39ae49ab134d3e3ec4514c6ab4b08e_JaffaCakes118

Files

1a39ae49ab134d3e3ec4514c6ab4b08e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0abad43e831a4d83cef34fd47272b468

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord573
ord685
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ