a2a92f60495182fa83adcb98d7ff5450_JaffaCakes118 | Triage

Sharing

General

Target

a2a92f60495182fa83adcb98d7ff5450_JaffaCakes118
Size

224KB
MD5

a2a92f60495182fa83adcb98d7ff5450
SHA1

3fd2e11eaf2c2ff05650dcb86e1ecbebc4106fce
SHA256

5a50ab1d17ed84b4e5810969a16670ca3f6b4cd6aa4a28d42d6ae40d9cd0bdd8
SHA512

157ef4082f5aae41379e0e9baf75b4cbb0370b82474c215779cd11db3b2545d0dc86f8a5a0f1bc6b7942ecd7f5ef52384fa2af773d478a9ed27f4dde62f8fe8b
SSDEEP

3072:Q+oe4kGLuXg9UDt8yIiKSE06osIIkGqrH2D00wMpxp3RWY7K/qc8Acx1JV4BSamo:Q37/qraD3J7K/Dcx3WBS7Sd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2a92f60495182fa83adcb98d7ff5450_JaffaCakes118

Files

a2a92f60495182fa83adcb98d7ff5450_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bda509dd7fc5a962f29c218abf9b3250

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW
SystemParametersInfoA

msvbvm60

ord696
MethCallEngine
ord517
ord518
ord519
ord553
ord660
ord666
ord667
ord593
ord594
ord595
ord599
ord520
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ord716
ord717
ProcCallEngine
ord644
ord681
ord576
ord685
ord100
ord610
ord612
ord616
ord618
ord619
ord546
ord580

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB