aa8cec5825d45c966da68ad2fa742b74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa8cec5825d45c966da68ad2fa742b74_JaffaCakes118
Size

201KB
MD5

aa8cec5825d45c966da68ad2fa742b74
SHA1

4d449d720a758a515a82f097595a4db98aa1d44b
SHA256

2f40b990fcde97160f848f64e8466802d2217054f6fd1dda016c3aefbb2db827
SHA512

949cede8ae8464e81200610afbe6b05c6549d1bf28131c37f7e269ecb30988b3912faf3958b4b415a674e685b73465111f14cbab5dbae987d411d776488424b8
SSDEEP

6144:aoRJ27uJN3G7B7w8FQHfMWmpA79PhVYsIjBFx4oLA5d:aoRJs2N6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8cec5825d45c966da68ad2fa742b74_JaffaCakes118

Files

aa8cec5825d45c966da68ad2fa742b74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db98524a131c47fe70f487147553b087

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord552
ord660
ord661
ord663
ord557
ord667
ord669
ord593
ord594
ord595
ord596
ord598
ord520
ord521
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
ord561
DllFunctionCall
ord568
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ProcCallEngine
ord535
ord536
ord537
ord645
ord570
ord648
ord571
ord576
ord685
ord100
ord611
ord616
ord617
ord618
ord619
ord650
ord545
ord546
ord581

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE