a9ec083aa183f661b01a109bd67473ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9ec083aa183f661b01a109bd67473ee_JaffaCakes118
Size

552KB
MD5

a9ec083aa183f661b01a109bd67473ee
SHA1

df9d14d556443def3cb828c717813241183f26e1
SHA256

2cad4c2f92eaa904f48d5ce14c5ee51ade2ba4adb1296b2ebc0f886df43ef142
SHA512

fd0cd4911354e0f4ed74533a83e201652523b35430974409900c8b2245e478051156e0f30773241800b0f65fd9fa3e38d7c7c32279d2afb61b8c1b52d6f87754
SSDEEP

6144:cV8r8IFINhc23rLD1cAA25JtURpwi03gI/qBisAqP5JGmrpQsK3RD2u270jupCJZ:jy02bLD1cl25JtUu/qBiNbZ2zkPaCx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9ec083aa183f661b01a109bd67473ee_JaffaCakes118

Files

a9ec083aa183f661b01a109bd67473ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17091ffe7a92a1f951c4345cec955da1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord666
ord520
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord100
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gtt
Size: 528KB - Virtual size: 4KB