1ace4a28fca17a0ce57891ac10490094_JaffaCakes118 | Triage

Sharing

General

Target

1ace4a28fca17a0ce57891ac10490094_JaffaCakes118
Size

120KB
MD5

1ace4a28fca17a0ce57891ac10490094
SHA1

dc36177a679fd2622525488f66e33c96e3d32cbd
SHA256

472c6aed713a7e37b955b87b3b324e292d9b746c042675bfe1a973fa5c22c364
SHA512

39280e5ae2ade670632a73bbd9a5374436cca43c0329b94351a33607dd37fa346d27ab5b5a284fabe5751a79212faa22588450c272107d9f781b26e62c173e92
SSDEEP

1536:0RXLBj+KbC/y8paluQWk3C3IvklbFUoUG0pjTZ4SEEs:0VBj/bC/3MXWak7R0fla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ace4a28fca17a0ce57891ac10490094_JaffaCakes118

Files

1ace4a28fca17a0ce57891ac10490094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b073726e9ea67cc7c5d33832aaa920d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

oleaut32

SysAllocStringLen

msvbvm60

MethCallEngine
ord516
ord669
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ProcCallEngine
ord537
ord644
ord645
ord648
ord573
ord681
ord578
ord100
ord617
ord619

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ