e01e11797698db4c2062ad6a50da9e15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e01e11797698db4c2062ad6a50da9e15_JaffaCakes118
Size

392KB
MD5

e01e11797698db4c2062ad6a50da9e15
SHA1

c55da4759c4adf8d8547b91640a250654fd64b87
SHA256

15fbea3a106efba639d7ac2d716bda3c147a93ee5cbbdc3f653664cda1c8bd84
SHA512

4899c96fd7831d1d2c7910e33a5853a85092f801e1bdc3f4791edf901fd202a3c1c0bdc47e9412dd04be3e909afa833e56908c9337ac61ed907140ec338f8934
SSDEEP

6144:RQvMborPtYaeI48Wu4u3f7lardyiJoOpJVZfMborPt/L:9ah48Wu4u3f7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e01e11797698db4c2062ad6a50da9e15_JaffaCakes118

Files

e01e11797698db4c2062ad6a50da9e15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

763867d754ecd5c88d4ac5e34e6bff0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord517
ord518
ord628
ord593
ord595
ord598
ord521
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord714
ProcCallEngine
ord644
ord537
ord645
ord570
ord681
ord576
ord578
ord100
ord610
ord612
ord616
ord618
ord581

Sections

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ