ce829bad2c2dcb9b5d0c8b18301da12a_JaffaCakes118 | Triage

Sharing

General

Target

ce829bad2c2dcb9b5d0c8b18301da12a_JaffaCakes118
Size

24KB
MD5

ce829bad2c2dcb9b5d0c8b18301da12a
SHA1

f88ee0066cbbd3bdc4f9b04a655aa2bebc04124b
SHA256

195c73634b7040978c9a6d98cd22551eed1c4c0d9457744922768fb9dc5b5e3e
SHA512

ac760529fd510531392dd83574c8349e179b54dd4c01ac8096f751641133eee0d62abbd2218b6ebd3f5d0c199c19d4f5ab3d7253ade8c020181f14a8795b320c
SSDEEP

192:VUGnTlqaYUjm0YNgzC3u1i7pVhkxpLY+odJ:FTBYGYO11i7dkbUJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce829bad2c2dcb9b5d0c8b18301da12a_JaffaCakes118

Files

ce829bad2c2dcb9b5d0c8b18301da12a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1235ef23df4229d7ab5d6376dba9647e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord531
ProcCallEngine
ord537
ord645
ord572
ord100

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ