ce2259899671d148533d4bdccdbc1d71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce2259899671d148533d4bdccdbc1d71_JaffaCakes118
Size

672KB
MD5

ce2259899671d148533d4bdccdbc1d71
SHA1

620de396cb9a36b6a7985e420330e54c7228c515
SHA256

8ef289e5ba81d4cd3344db901ec8c7d524e63c1f792a017c26a29ab8a2665401
SHA512

85e5587dfe7e0e42a6ae4d0890d96c1d1ad589b7ff309605cc680cb1957e1d948b6a973ad5702d28222898744ab67b82cee81fc952d3c96a7638358b7e5b37b7
SSDEEP

12288:Q8aki2l5o9IWzqYB79Kj+HIgXIP+CM/kmkB9a/KhQdEjPXhXzAQHL+5M:Q8aGl5o9DzqD+HIgXIP+CMcmk+ihaE10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce2259899671d148533d4bdccdbc1d71_JaffaCakes118

Files

ce2259899671d148533d4bdccdbc1d71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1726b230252bcd78c726542e7a29d026

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord578
ord685
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 660KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ