cef6c852e08329dd93bf70d3ab489ad1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cef6c852e08329dd93bf70d3ab489ad1_JaffaCakes118
Size

28KB
MD5

cef6c852e08329dd93bf70d3ab489ad1
SHA1

c53b82d47e03dfd021379a8338b9c2e9cf231796
SHA256

477b615c49100a4e58e21d1cb40e45e301507982ac345f17fddb9dbe1bbc37e5
SHA512

bb4457af50980e4489d83ee982b9b2ee0f17079e7ab6eec68b3e2ec80146af28728a08665e1801b1e9c9f3af67e4f76f28a91b3d6ce82fee4ca4d13390f58e96
SSDEEP

384:mcwP4OXqBdfYbC9vR2ZawNtWq9UKDOkSOVEK:lOXqBZYbCz2ZawNtnUK6JV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef6c852e08329dd93bf70d3ab489ad1_JaffaCakes118

Files

cef6c852e08329dd93bf70d3ab489ad1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

211e4377342dd0fc1ff7acd4ad17692c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord300
ord595
ord306
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord570
ord578
ord100
ord612

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ