dea4ead4eb45ec33bd4c53e309179880_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dea4ead4eb45ec33bd4c53e309179880_JaffaCakes118
Size

108KB
MD5

dea4ead4eb45ec33bd4c53e309179880
SHA1

8016334731ccc3eeb41e7a9206d8e7650535bd0f
SHA256

2a93666466957dd40dade21e0c862005f6260f05e003b9f42e899f5e692fd432
SHA512

47b91a5aab188956433e69ddc9b787756fd66c967c273ed4cb0ae267de18c17801adf9dc11265a7caf161273c335140fdd1f07d89331499c1f5b7dad10e48a3b
SSDEEP

1536:BUBqDteyOt/0dG61bpaR1NvoCWrOZia5Akf3OnU3h6k3hl4HsaR:AwtVm/0d3cR3oCy7Dkf3Omh62hSH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea4ead4eb45ec33bd4c53e309179880_JaffaCakes118

Files

dea4ead4eb45ec33bd4c53e309179880_JaffaCakes118
.exe windows:4 windows x86 arch:x86

297d222da34645345c870cc662f88df6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord598
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord617

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vusa
Size: 84KB - Virtual size: 4KB