e03e8d04079e6d3b973e8eb5fdff7430_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e03e8d04079e6d3b973e8eb5fdff7430_JaffaCakes118
Size

76KB
MD5

e03e8d04079e6d3b973e8eb5fdff7430
SHA1

fbf7321031bae67edcbf3b8cef20a4aa3c443d41
SHA256

93a0ba84b63003723ac8b7e6460c296ffec3dd5d53ef46df388bd677e3fb5dea
SHA512

f89bea4c334dfae938d105c117dbe217401949d159d3067cc935cf5baa685f0b8e29e423aee082b669fc4da48caba32891c184d7fd61d3a869a12cdb14be934a
SSDEEP

1536:kk1JhJEhgLTs6E3P3acYhguLqga8BXlag:kkJ0hgLYP3aVZl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e03e8d04079e6d3b973e8eb5fdff7430_JaffaCakes118

Files

e03e8d04079e6d3b973e8eb5fdff7430_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87d8930c59e54dd37c4910fa2f222ac5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord516
ord519
ord626
ord666
ord667
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
ord670
ord568
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord714
ord608
ord716
ord531
ord532
ProcCallEngine
ord537
ord644
ord570
ord648
ord681
ord577
ord578
ord685
ord100
ord689
ord616
ord617
ord619
ord546
ord580
ord581

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ