aa403c050d5da36fcf9e3c2f90865e16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa403c050d5da36fcf9e3c2f90865e16_JaffaCakes118
Size

20KB
MD5

aa403c050d5da36fcf9e3c2f90865e16
SHA1

878c4bc099894ad542fd33aadf573c6119472b88
SHA256

162695d45cf5ae7d484a66f48a4930bc63441ffe2d2592492fd6db2f172bfc87
SHA512

e405aa4ea14700fec6c4180b6f645c0e8ffe3d12b8c8056856f7df0985961eb5ed6d37ef45909f68b0428fa6cbd2bd2465f7012ee273c98cc39f08707fab1785
SSDEEP

192:twHpwBU+EpRCbBQ57y7Ktd4733NVaOJA+aSo4nbEbGUjykAb:KiSAb2VJqRVa6Q4QljykAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa403c050d5da36fcf9e3c2f90865e16_JaffaCakes118

Files

aa403c050d5da36fcf9e3c2f90865e16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fcdd05d93731bc25722e901ce4ee33c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ