a14d04c8434ad55287c84399339dbc30_JaffaCakes118 | Triage

Sharing

General

Target

a14d04c8434ad55287c84399339dbc30_JaffaCakes118
Size

160KB
MD5

a14d04c8434ad55287c84399339dbc30
SHA1

bd55fe8951bc034a814b951ed8a64b4a9ce5516b
SHA256

2f3942f234218f48e2b9b3c18550d5f2382ecda92dcfe8272e16b534d65de628
SHA512

1ea16f9486aa4f4f58b90704ec0bcb1fbfea8b9c05e84f687cb4c0188cf819a0c7880f32a16e91384abbf7c4c22cd10dc310eb14f1660923f06e71ff33ad1b48
SSDEEP

3072:qHmHnB9M0HWfZIXjTilnuhuguuumxH/+r48:LJbxH/+r4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a14d04c8434ad55287c84399339dbc30_JaffaCakes118

Files

a14d04c8434ad55287c84399339dbc30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61a366ef706398d70fe37633494ad5cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
Zombie_AddRef
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ