aefbc3d27ea2beaac3919a455f6f0ec8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aefbc3d27ea2beaac3919a455f6f0ec8_JaffaCakes118
Size

652KB
MD5

aefbc3d27ea2beaac3919a455f6f0ec8
SHA1

f646c13ab71180b268394b38997a1fd6360eac2c
SHA256

95afc2cfd96b18650b3ba58b747b26628519ec2e37a44e2b6e4100f0f99ec69a
SHA512

38f879b1e6e1ac154a49231729f9d142a61e300b4a65de54e20abc684c50824ffb1b60998426b5e631d5e15cfd0f8210981b3711dd479d2335a262db1ecea9e4
SSDEEP

6144:Drc1XAcoUsjxHE0WY8sjrPrdq1EtjSq9:/uwcoUsjW0EsfTcUj7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aefbc3d27ea2beaac3919a455f6f0ec8_JaffaCakes118

Files

aefbc3d27ea2beaac3919a455f6f0ec8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2d3fee83c97371032321f0ff7721922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord716
ord570
ord571
ord681
ord100
ord610
ord612

Sections

.text
Size: 548KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ