b017ebaa78eab78ab69c8f18ecc43b26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b017ebaa78eab78ab69c8f18ecc43b26_JaffaCakes118
Size

52KB
MD5

b017ebaa78eab78ab69c8f18ecc43b26
SHA1

f34fa9b66439921d93bd06cf8b52e70d869df73c
SHA256

92687f116acf75ecc8b4b44c124e02db429fcbe6f832d239e1c9eb57066b24bd
SHA512

90df7c054ee585624bd9597389349e3c0cf6cbe1c0702d45f582a95f3c1ef9a57508caf865162a7f4cd7374267ec07b0a09215b33b5d7e6efc1ecfa139f6eafd
SSDEEP

768:CqFhU3ul7FgphJmPzaHFgKPTKp2wIvl4Ri006/0d:4EyxIWHFXwI+R6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b017ebaa78eab78ab69c8f18ecc43b26_JaffaCakes118

Files

b017ebaa78eab78ab69c8f18ecc43b26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a05f01a769d75633c1d2b5bf4961881a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord645
ord648
ord570
ord100

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ