e056a0ac37cf35c93edbbf71566e2062_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e056a0ac37cf35c93edbbf71566e2062_JaffaCakes118
Size

504KB
MD5

e056a0ac37cf35c93edbbf71566e2062
SHA1

1dde65532108381e52c49c49d7a6d5b73d38c2b0
SHA256

e243994afd62181c890269bc395eac504915767e0f3fdaa5f2842290f7a6fc81
SHA512

e46eea092be0e91d92e7464629bb742a2c64c618226bd50352d2839d7d77020895c4ba8512e25596a4f56fa6ed676647ebc304b60a318683be288124d8f56a83
SSDEEP

12288:GQEy03/o+eVbq68gMRNwP/zmMEFOVFXQHFn2jrIw1o:uy0vZeVUR6XzmMEFggln2jc6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e056a0ac37cf35c93edbbf71566e2062_JaffaCakes118

Files

e056a0ac37cf35c93edbbf71566e2062_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62e2a5d33a4efbfd457ff0c57e6a9785

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord692
ord586
ord696
ord698
MethCallEngine
ord556
ord663
ord557
ord665
ord592
ord595
ord596
ord520
ord706
ord521
ord522
ord631
ord524
ord633
EVENT_SINK_AddRef
ord673
ord568
ord676
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord712
ord713
ord531
ord716
ord532
ord536
ord570
ord571
ord100
ord687
ord610
ord612
ord613
ord616
ord617
ord540
ord541
ord651
ord547
ord580

Sections

.text
Size: 488KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ