e0e6698efecd75e38c29defa7177ad3b_JaffaCakes118 | Triage

Sharing

General

Target

e0e6698efecd75e38c29defa7177ad3b_JaffaCakes118
Size

48KB
MD5

e0e6698efecd75e38c29defa7177ad3b
SHA1

531da543ab1bc1484e208031df01f1f9df18500e
SHA256

baa873b5545a4c795288088ab5aaa2afe851f5471d04627a98dacee844194d5c
SHA512

ba9c17c1c4a056a89f9ebac04992f7be795ba9ea2fd7e8b0cd0d5f121484d5ca2b877933d0d76f3ff929593f519ba18f3978e28b7bc8adfbdba8c4e3e1c51a73
SSDEEP

768:G6gPrFNDkoAE8HTTag7xzQROV2u2YAAK6g8nu9iWvLlOd7I40P:G3D9uH7xtc+NtM/mIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0e6698efecd75e38c29defa7177ad3b_JaffaCakes118

Files

e0e6698efecd75e38c29defa7177ad3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5494ae253629779ffb28cb0c65c0a03e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord619

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ