abeee28d0acb315098b322866e893390_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abeee28d0acb315098b322866e893390_JaffaCakes118
Size

20KB
MD5

abeee28d0acb315098b322866e893390
SHA1

63014d52bee0cf92cb1f244e17a22b7428c16386
SHA256

ab6d29497ec69129f4190e7a26eaa6fd7f2cd8a8931e7157027af12a774ce72f
SHA512

950a4633d741f8e3e10df8f75f55681c99e3cf9ea2c0bd0ac3a72fc8a82b0a587d6643d6c66fdd24e1c40ddb44d6864c8496be28930a2db78ded4a399985d1f6
SSDEEP

192:yCl+EQZc3XBqS3A+5H6YluRTvCtMoQ9IjuvJcPk:ZOmBbAXRTvCtS2jYeM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abeee28d0acb315098b322866e893390_JaffaCakes118

Files

abeee28d0acb315098b322866e893390_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9de232225c0d3c705c968869fc89518a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ