e014e86effcce64c55a95f5c1a60f15b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e014e86effcce64c55a95f5c1a60f15b_JaffaCakes118
Size

248KB
MD5

e014e86effcce64c55a95f5c1a60f15b
SHA1

25ba8621e27d5bf502180b93829bd4ec8a82b12e
SHA256

9172a6db1b364035c10a2038da0fa54938cbbee771bba8391e71332a1781c52c
SHA512

a750e771f07407784adc16e2b6f0a9a1565a93030823c812111b93505092fdd0c6d6fcd5e683742475ce1a9f8e5bf289d72804be70409f55bbbe57377bc413a7
SSDEEP

1536:QbHMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wm5LVocz:QbsX0e1FB/DpKjCLHAm5LVl1xbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e014e86effcce64c55a95f5c1a60f15b_JaffaCakes118

Files

e014e86effcce64c55a95f5c1a60f15b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a436d842560ffdb1a2366cb9e2839b70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord626
ord628
ord665
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ