2aeacb6f8a140c8a4c4b4c50a21c15fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aeacb6f8a140c8a4c4b4c50a21c15fa_JaffaCakes118
Size

20KB
MD5

2aeacb6f8a140c8a4c4b4c50a21c15fa
SHA1

f74425eb6164b54bdb85c8361c8ee04f2ea8aa79
SHA256

1267cba4a248cc6a68a6fbc51b52f71c82a10767a11f720fff132675bc920a12
SHA512

b4a5a2c20626c5c6243d327b4b58ceeaea5f2e873c80c67decb58f3c1729bec7dfa59eb899863a292cea1b24108a6b9118ebb0aed5e26ccb8df5b3b3209ca6f3
SSDEEP

192:4Dy3JuKzOMnmdXUX7z2dJrT0K7EtmDB9E:4YsKz1nwELzC0K7wgO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aeacb6f8a140c8a4c4b4c50a21c15fa_JaffaCakes118

Files

2aeacb6f8a140c8a4c4b4c50a21c15fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

109d0b13120081ecfabd14dc151a8b0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord618

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ