ce4988c70c17ac8fd669c146e4310e82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce4988c70c17ac8fd669c146e4310e82_JaffaCakes118
Size

140KB
MD5

ce4988c70c17ac8fd669c146e4310e82
SHA1

4df3b3b912f653716b2b16e5e1ec69b425bc7e75
SHA256

40011f8fb0a61143b19969861083162a7b280940ccd31e1ca66fc10fe450bf2a
SHA512

1a4ba1d5b14459b0fcc952f6a7485448928461254854c41420d893ebce199e3ec3e804ce9cad7a00d79a378152e00a975bf18b935d1a8f0298e74b2fe23b6dc7
SSDEEP

1536:KXZLfoi4VSab9manAeQlDoHes7PdNgzTzUnmrHXoFXrZC1R2EN2DDHPbr:KXFnTlE+4fnm6bYS7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce4988c70c17ac8fd669c146e4310e82_JaffaCakes118

Files

ce4988c70c17ac8fd669c146e4310e82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9cfbab66f992000e46d982f6b9e435a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

msvbvm60

MethCallEngine
ord516
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ