ad7f3cf0b1db2121c2daef99c59a1f5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad7f3cf0b1db2121c2daef99c59a1f5f_JaffaCakes118
Size

568KB
MD5

ad7f3cf0b1db2121c2daef99c59a1f5f
SHA1

1d8aad9e68d5437b05b1bb84a6b7fa3d67bee975
SHA256

d0b1b0c40950df3da676f7714a120aff3c40d2218eba7f4548ea028667af887b
SHA512

b02498848ddae271c899566aa21d6ac6f391f03115c054279294a06664308548747fea6b1f8ed0b960bec626311c73894aa01c431f17a5bfc71471b3ed12aa35
SSDEEP

6144:4hmdK0RZycV1y3erOnhB55pqKeo0VE2APMVvye0U31sQsigH:IEK01+erOEKeo6vVrnaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad7f3cf0b1db2121c2daef99c59a1f5f_JaffaCakes118

Files

ad7f3cf0b1db2121c2daef99c59a1f5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c100fa83ff3a125961b5a6cad0b0fe17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord644
ord537
ord573
ord100
ord616
ord618

Sections

.text
Size: 396KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ