a18094435f68d2f6c869a163f1361a59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a18094435f68d2f6c869a163f1361a59_JaffaCakes118
Size

84KB
MD5

a18094435f68d2f6c869a163f1361a59
SHA1

d463f659625f32545fe5cc8a4fc9948a72674489
SHA256

ccd167cda5eab37307af38d688c00b7e74dcf424457d9b464ef198aa4661b933
SHA512

0480d7f63f2588e59c9e9ee816c446c785330fca0e381340e6ce6d3b2f2025d2215f5a4b1abe2d41239c5aa6632703b3889101fb8b865423bf6697b79fba8905
SSDEEP

768:eemQ9lpOMBRzeafyi4YXG0qwJ3ZM0X0+Nr333ZM0X0+pwr0O7Ui4leafFdz:tlpOezJmPIptUqlJ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a18094435f68d2f6c869a163f1361a59_JaffaCakes118

Files

a18094435f68d2f6c869a163f1361a59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

263de95bbbdc9a0f170006ff619fdb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord616
ord581

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ