ce32d39d60ff05a966c757507a33075a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce32d39d60ff05a966c757507a33075a_JaffaCakes118
Size

812KB
MD5

ce32d39d60ff05a966c757507a33075a
SHA1

8eca1248560f5096cd974c827850dc34edaa4c39
SHA256

8d5698399ad9527714c797fda2b4945dfde049b5b32619b631b1d2dc352bc964
SHA512

8ca2986546e9767dd4a3a806bd542ef2801893a211a0b0f3058dae5e17cd573dc7f4aa867800077eca3feab9c265b7415f2ae8055c4d1bf420a032cd85349def
SSDEEP

3072:JT+7Il/oRE58gZfYQ+y1t0VZfYMwZQ9LBnYQ2tRskCf2iq/NYiX:JP/Zw9y1tMZwoLhYn6kCf2iq/NY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce32d39d60ff05a966c757507a33075a_JaffaCakes118

Files

ce32d39d60ff05a966c757507a33075a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

458f448946adb638cd4dbe7aa7d88682

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord681
ord100
ord618
ord581

Sections

.text
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE