a55584452da2e3c1ec3f78feb30ee1e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a55584452da2e3c1ec3f78feb30ee1e8_JaffaCakes118
Size

124KB
MD5

a55584452da2e3c1ec3f78feb30ee1e8
SHA1

944eeb43b57c50277a5788baaaff7c001b61f763
SHA256

de068c1a8c8b524b6f66f7717cba0082a9d0fa0add8c4875ce64d6aae14586a1
SHA512

960b0b67b2eebc45a124efa218b57208647df53b56b7ed5ece26f9ee2ce399bd1b61707697df9b3640591259abb2d65f009af1d3849f5232b00b6053e1d4fcad
SSDEEP

3072:jNOFMeygLcrA9nQphlmLxedt1rEJWvcFGG1TUOSJ:jUxEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55584452da2e3c1ec3f78feb30ee1e8_JaffaCakes118

Files

a55584452da2e3c1ec3f78feb30ee1e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a27a778be940014596d123271bd4e026

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord588
MethCallEngine
ord516
ord666
ord593
ord594
ord595
ord598
ord520
ord525
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord571
ord573
ord681
ord685
ord100
ord689
ord613
ord616
ord617
ord650
ord581

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ