c019f2c9283292ebbfa0ef48ef08d7e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c019f2c9283292ebbfa0ef48ef08d7e7_JaffaCakes118
Size

128KB
MD5

c019f2c9283292ebbfa0ef48ef08d7e7
SHA1

5f2f6d588ca15407ae3b83518fbdcb8bff841ba3
SHA256

eed50fcb7b9bc62f444ccb9eae27a88993d3c90093fa35e8dfc2d4adbb65af43
SHA512

a3d9b0364dcc6fb785716ef6d7147ef98e520c84805a35e3bcabe7ac8d04b17922336c7ba2f57de2d085781cfed8c878b370b4ab525ba7a0dd48876d0aa2e7ed
SSDEEP

1536:I1IztreLlktuDwUfvnwb8l1E+d+Q05ZSY+A37feaCMJDmYsLIb4PvYqHB/AgG:OIUlyM+Q05ZSDADeak7dJHB/AN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c019f2c9283292ebbfa0ef48ef08d7e7_JaffaCakes118

Files

c019f2c9283292ebbfa0ef48ef08d7e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbbaabd250d8017ca3e6c9d908dc647c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord660
ord661
ord595
ord598
ord520
ord631
ord709
ord525
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord645
ord648
ord571
ord685
ord100
ord616
ord617
ord619
ord650
ord546
ord580
ord581

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ