a9e4eed3b2b570429a81677a650b931a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9e4eed3b2b570429a81677a650b931a_JaffaCakes118
Size

36KB
MD5

a9e4eed3b2b570429a81677a650b931a
SHA1

248d530930ed1d04826bda31ddccebc39f7597b9
SHA256

e33f12f7525bdbb210d6f8ecbfd713731bb3509040d98902016c16b0f6b26c00
SHA512

7c39871f71120559f0eeaee402c6f7e3410047ab196a50b1736b8de7988c2c61f6d567a5b19842add2af62e95968ae7d498650856c932052a5c4f30fbe453337
SSDEEP

384:HVRWZzq9KLwHipOpW3nyxqeTtEAhz7KuWJ2DoGv8U5fQ6zeFmd9:HVMZiKLwyLeGs7KzJ2Dom8U5Ic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9e4eed3b2b570429a81677a650b931a_JaffaCakes118

Files

a9e4eed3b2b570429a81677a650b931a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0f4f23fbf8eef83dde46b3038abab79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord717
ord537
ord644
ord570
ord648
ord572
ord573
ord685
ord578
ord100
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ