ce56ac2ec4f161c6f6b1a04d771ea186_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce56ac2ec4f161c6f6b1a04d771ea186_JaffaCakes118
Size

204KB
MD5

ce56ac2ec4f161c6f6b1a04d771ea186
SHA1

b67f5ff134d3d1e8c09a94c4e0f8e355e6bdb697
SHA256

99177dd529e76aaad125a47cb9c43425f1e342cbd309e48b44480c3af2193786
SHA512

408416372bd3bf4dc3abc1e5cf4b2f03fb9e884d50571f7abf47de563ac14020036bc0a24b2e9d9679d6e885b6567cf013abe71f9bad471d2fa22a79f36e1182
SSDEEP

3072:WUUooTk/jb+ZVej9fNsd7kRCk+LlFgCWCw+R:WUkk/iQSVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce56ac2ec4f161c6f6b1a04d771ea186_JaffaCakes118

Files

ce56ac2ec4f161c6f6b1a04d771ea186_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e8513ef8200e9ca30b2ef432b0dd704

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord588
MethCallEngine
ord516
ord518
ord593
ord594
ord595
ord596
ord599
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord716
ord531
ord645
ord571
ord573
ord100
ord689
ord610
ord612
ord616
ord617
ord650
ord581

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ