a2495ca2d994aaf6ece5de4c1c865f37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2495ca2d994aaf6ece5de4c1c865f37_JaffaCakes118
Size

48KB
MD5

a2495ca2d994aaf6ece5de4c1c865f37
SHA1

f7d6976568e5751f8c0f0aedd0a4ce03c073fa8f
SHA256

9754e4e5cc7010d9c45afe81371315abfa205831e8ef5b6b0bef06165ad01184
SHA512

ea98521839d5465d9f926504cc7edeb8b7926c69b7d812a87368c7b6f8d5d6926508db7a776b5193b2a762fb0cabac0f49a7023a47c2d89d5625b9a7e7beb33e
SSDEEP

768:IK+WjPq5BdyuZL80+Th3cezZWzfm+KY4h4Dhg65Dc5UjSuOVgsE6Nt+yo7DsAA8K:MWjiVyuZq+digNjezTf/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2495ca2d994aaf6ece5de4c1c865f37_JaffaCakes118

Files

a2495ca2d994aaf6ece5de4c1c865f37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

483d240185b28c50efd102661f0adb72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

msvbvm60

MethCallEngine
ord516
ord665
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ