c12b5184a190b09eccd96bd3ca7bfb74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c12b5184a190b09eccd96bd3ca7bfb74_JaffaCakes118
Size

24KB
MD5

c12b5184a190b09eccd96bd3ca7bfb74
SHA1

5a60593e734f393bebd02598f039df33abc30555
SHA256

f06037ff0f037b2306f67b6f0ab12f944fb8718c535542096ce72b19235f8f95
SHA512

ee0cf6fa4a7aa02c14f0328471b65bc67c57ada858974d921afd67f6f6b53ea30d970c8a533c0f2ab2eb024454217dd7c3a85550cb08939742c1ee80cd076cd5
SSDEEP

192:IdFZx+GHf5fbuLUWTQ3KmgoWxe0iea208BsmLvnjhntg7q+364BFJsZMHc:Ivl1bxRWx+x8BsmLvnFn+mY64BFJ/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c12b5184a190b09eccd96bd3ca7bfb74_JaffaCakes118

Files

c12b5184a190b09eccd96bd3ca7bfb74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c29f6049f763f7e5d0e47ef7546a5099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord537
ord648
ord681
ord576
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ