adac6554ca95cae55c8bbae4d2934633_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adac6554ca95cae55c8bbae4d2934633_JaffaCakes118
Size

60KB
MD5

adac6554ca95cae55c8bbae4d2934633
SHA1

8463c036bc79b889dbafd82c79365ca96d5aedae
SHA256

e5171c062dbd27a9c02fc25b85fb72e8b7a4bf21bad7fabb44c36b319604950d
SHA512

67ec2e264d33c0fe9860d57bc1c531f0cde37aac9c0f01ed925524783c0945307d88b9443c62174c2e900a05fdeb3c8d1cf6707ff60ead8bf3fa5f15293c7d2a
SSDEEP

768:m0yjL6/P/QRmaIRwO2ICURUtSVB3qrmaBDJiqrmp:ZyCHCmaIV2ICURUtSr6rmKUqS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adac6554ca95cae55c8bbae4d2934633_JaffaCakes118

Files

adac6554ca95cae55c8bbae4d2934633_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ddd08bf87b3a22c9af00b3cce6ec35c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord581

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ