acd2a19ff54609a0bd77c9083b105879_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acd2a19ff54609a0bd77c9083b105879_JaffaCakes118
Size

20KB
MD5

acd2a19ff54609a0bd77c9083b105879
SHA1

1eb8fafd5da22caae52803d88d7d1d2d866ea594
SHA256

439b7433c6ddceb082e3efceb6b26eb83fea254b7826f6517c28185bd58b41c9
SHA512

7d14f4e6875aaa169d1dc58cf735b7dde737f4a19025e8014b7b1934c6b1a16bae003cf9dd95319170e25a7021bae7d395046a7c26dde56097c6d4260ad86fbc
SSDEEP

192:GQ94cxlPJfBwhneSZUM0M/R7HlkN74HuO7VAb67I:ndBoZUM0M5hkcwbkI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acd2a19ff54609a0bd77c9083b105879_JaffaCakes118

Files

acd2a19ff54609a0bd77c9083b105879_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1f0c9dba450e259755e36319e8d034b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord520
ord631
ord32888
ord128
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ