acdb6458ebc3e74d4cd78f1c593c53b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acdb6458ebc3e74d4cd78f1c593c53b8_JaffaCakes118
Size

883KB
MD5

acdb6458ebc3e74d4cd78f1c593c53b8
SHA1

ad0a99242256098673685e42966cd1bc520302a4
SHA256

e15714c6ab79f439cd26968d0648f4472021dd77a5bd3d58ad7a2631abb181c1
SHA512

e2e17fcb58daf55239e989830f3ccba0e30141f73f40d4ed1e6ef32ce9ed172b5331463affe2ff40dd3d5aa72d2bc2346f7bbe0f0d632f326e73a31729e68ae5
SSDEEP

12288:jb1QC3m2ALcx8TKKUsi6okD+Oc9iF1kllL8k2aubOHr4h/xQp6+tqOYy9zo0b+ot:wLWKUs1YAFglBubOc0ltYYomefDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acdb6458ebc3e74d4cd78f1c593c53b8_JaffaCakes118

Files

acdb6458ebc3e74d4cd78f1c593c53b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

455e3c87c5118c04ced3f6d538c9c2e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord573
ord578
ord100
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.......
Size: 456KB - Virtual size: 4KB