1a8a6aaf3e08a9b85c61ce1c8722ebd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a8a6aaf3e08a9b85c61ce1c8722ebd7_JaffaCakes118
Size

264KB
MD5

1a8a6aaf3e08a9b85c61ce1c8722ebd7
SHA1

24e994bc7de75fc226ddfcc0b691fbe67c37edb0
SHA256

5663e7916ba782c036310bd5cb75ef5419d1782fb0400a334a1ec03818dfc24c
SHA512

d37809bd3f72c5de9bfea93d12d1f2762e3bfb037ce0d755bda85df7b84236e81a6285af7f9b93f222228718bd3a886612825f5197ebb2e48520af131d80cf09
SSDEEP

3072:Ktn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4tD:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a8a6aaf3e08a9b85c61ce1c8722ebd7_JaffaCakes118

Files

1a8a6aaf3e08a9b85c61ce1c8722ebd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb21ecb4548c6943a3a6db57a9aeaae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ