c10ce5b3357ef0f5d87b7478f86c841e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c10ce5b3357ef0f5d87b7478f86c841e_JaffaCakes118
Size

24KB
MD5

c10ce5b3357ef0f5d87b7478f86c841e
SHA1

727a1492249183c48c6bfe038ee76136d0d08dbd
SHA256

f1629965a2a126ccdbaed2b8e972f845b127900e8490434d3fe4607bb58dd6aa
SHA512

60d32d2038c0b1781a7b96107159043c6e057cd2df528b44a223e1ebed5f4e1e53fb460f4ab1c3a8f2a20345820f4db427e34da3f2e1968458149dfa4f3f768e
SSDEEP

192:fPeIKM5uPx3Hf4lsF4zV1Lu3WxcUISMjwiyxIhKjEl:fPeIf83HysF4zV1LuGPISMjwiyrjEl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c10ce5b3357ef0f5d87b7478f86c841e_JaffaCakes118

Files

c10ce5b3357ef0f5d87b7478f86c841e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2108fcfcb99d20ba0387a6802038fdc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord595
ord597
ord599
ord631
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord716
ord717
ProcCallEngine
ord644
ord537
ord578
ord100

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ