ce7ef1584115d22f006b1703db0dbb86_JaffaCakes118 | Triage

Sharing

General

Target

ce7ef1584115d22f006b1703db0dbb86_JaffaCakes118
Size

310KB
MD5

ce7ef1584115d22f006b1703db0dbb86
SHA1

d39391e42fe0a303c16ea7bebff04c641164f29d
SHA256

3f86171089de8692f9a9c11f1ada4c8a68c7dd872879381003bdc9a170298775
SHA512

01a6efb08144bf00904cc80298307cf218a80459652688a3625f72d668b931e1aa503f374fbecc113d0d4ae4f10275cabaf751781fbd59d8d687bdbae87c4c7e
SSDEEP

6144:sv5jVTlQ7BN9RXU4CP6FLw+OzWm0byV1GylBhaJoXFn7GkFMJ:AyRaPaLwBz5ayV8OzfFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce7ef1584115d22f006b1703db0dbb86_JaffaCakes118

Files

ce7ef1584115d22f006b1703db0dbb86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f56891670266ab5c4e6acbda5cf9f1be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord667
ord598
ord520
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord571
ord572
ord681
ord685
ord100
ord579
ord616
ord617
ord619
ord650
ord546
ord581

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ