aa12be23fb30c809e280f9510bb60033_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa12be23fb30c809e280f9510bb60033_JaffaCakes118
Size

208KB
MD5

aa12be23fb30c809e280f9510bb60033
SHA1

741a0bd09a38e2814066a74989c99ccd5531abd8
SHA256

47194560c0d9190dbbf38726d0eeb47f87db8b80264c73b264ba13ce891e3562
SHA512

0885dcde25666b9969c4b259706a9d25f02462c4c50a5b6cf7e51a07d7e8f4a336666b3abd608bf9e91366a2a628e6c272e8e7f787e03c733e2776c3dcbb3e1d
SSDEEP

3072:HJc4j4tMBYsnkGq94PJeG+5XiZH0QYuT3ZyZuTWFsIPThZgf6nY:3O0+5X2H7p2AGsIbhyf6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa12be23fb30c809e280f9510bb60033_JaffaCakes118

Files

aa12be23fb30c809e280f9510bb60033_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a621bcd80c5ce10eeaa7ed8c59b1d39f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord619
ord581

Sections

.text
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ