ad4dedcf4d0567db110eefb869b82118_JaffaCakes118 | Triage

Sharing

General

Target

ad4dedcf4d0567db110eefb869b82118_JaffaCakes118
Size

20KB
MD5

ad4dedcf4d0567db110eefb869b82118
SHA1

001f4b15d9cbda1db6159c98c51e71cf0e0fe359
SHA256

99a831493a31e46a52210152a4f79e5bdc3035f4ed7a4809d87f17c946b88f0b
SHA512

eebe4aa261d64b918af9661aac2409daae825b5de80a67603b3ec9911e8ec07519df4d8079d405ff9e616810ca680b72d2f3797a0ac49549948dbda0fb5e0f06
SSDEEP

192:VKw+EiQZOupSWuwbQT/oDYeog3TMZvQUcBAOaU:VKLUOIQT/oDYY4ZvQbBAzU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4dedcf4d0567db110eefb869b82118_JaffaCakes118

Files

ad4dedcf4d0567db110eefb869b82118_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a43ef63d74aec2f0bc1b1855eea0ccf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord585
ord586
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord647
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ