aae7545ff64b2b447293ff5bf80e9629_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aae7545ff64b2b447293ff5bf80e9629_JaffaCakes118
Size

28KB
MD5

aae7545ff64b2b447293ff5bf80e9629
SHA1

60cbe9d0ee5c272696ad9a7950b908704d02f40b
SHA256

3f81bc071182c3e17b414c81652f2139f493a6e499d4fb8dd506df206f6f31ac
SHA512

499d62550a0924daa89eb415262524bd3849846ed176604e454ab1af9e4b4efb23fa18858329a690f482c9eaac6e6e1ab963678654a41319f9f5b77d2ac73765
SSDEEP

192:COFwTTTTTTTTTTTTTTTTT9ouQZn9oGeOQA2JeD++758eqQ9xrylnbNasayBxYsJ2:COFJuQVnuJeDzqtnhFHUVhYWTvOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aae7545ff64b2b447293ff5bf80e9629_JaffaCakes118

Files

aae7545ff64b2b447293ff5bf80e9629_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a1c1c50b42b64638a9a270e09d12d83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord300
ord306
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord570
ord681
ord576
ord578
ord100

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ