e0a41a92b9b061a29a2c23fd65b3cdec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0a41a92b9b061a29a2c23fd65b3cdec_JaffaCakes118
Size

252KB
MD5

e0a41a92b9b061a29a2c23fd65b3cdec
SHA1

7a3ef61d9e35a353901816711b9de74840249647
SHA256

41dd07e1b316f146ffb45698b8956ff8ee7b63fc18aa527968d0b53d15954016
SHA512

1a8411f32e3a23d3feadea8e63f390e89e3e51121e988c3d0d77ecb22e9b82bc624b981051de9dd9af0acb5e1dc8ef8c7c8ac5a9ebc58beecbf46bc27767029e
SSDEEP

1536:72LYMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVQYh6IkTNQ:Y7X0e1FB/DpKjCLHBIkTNvAbn9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0a41a92b9b061a29a2c23fd65b3cdec_JaffaCakes118

Files

e0a41a92b9b061a29a2c23fd65b3cdec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e7e1bb046c4c6d3ca42779bf040aa77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord626
ord628
ord666
ord631
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord572
ord100
ord617

Sections

.text
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ