deeeedd6526f5125849dacad9f6d08a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

deeeedd6526f5125849dacad9f6d08a6_JaffaCakes118
Size

24KB
MD5

deeeedd6526f5125849dacad9f6d08a6
SHA1

a87437bcaf249efb7e9d33085976a97d46e0b6a1
SHA256

17d05ddedd1ee27c00316c089f83d503267c471c782598b62cbd175172c19b45
SHA512

e1b0a8e545d403813940050d685e2be28aaefe9309d72d58b2141b2fdb7c89ca24271732c56d97165f7c6ce439e7ce3338a6906b31a762b6d00bfbb1e2384b12
SSDEEP

192:U/tt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:U/ttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deeeedd6526f5125849dacad9f6d08a6_JaffaCakes118

Files

deeeedd6526f5125849dacad9f6d08a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ