e18b00832f9b030604803c7af09913ce_JaffaCakes118 | Triage

Sharing

General

Target

e18b00832f9b030604803c7af09913ce_JaffaCakes118
Size

478KB
MD5

e18b00832f9b030604803c7af09913ce
SHA1

1da7e98a51b3a151df3f6c1253a3482af9a8d909
SHA256

5c0c1e40f0bc60f72d24aee2d9a71c0e32ab3ba9f6d343c38cdebbce17469c6c
SHA512

686484a35063f18147bf8d4b924084e1d30cd2bbaa3fdea462cddec4437d4807f8caa59400a56236739c36d816419ea065dab3e0926c3bcaeb5d4c7e36df2605
SSDEEP

12288:7gIe0IKH9WsMKmU2DEvjlRBYI+ecH9WsMKmgTjGR5m:0Ie0/Sx/ovjNcSxam5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e18b00832f9b030604803c7af09913ce_JaffaCakes118

Files

e18b00832f9b030604803c7af09913ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2cdac0d4b84d71baffdd38fcb762c7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
MethCallEngine
ord660
ord556
ord558
ord669
ord300
ord595
ord303
ord598
ord306
ord520
ord309
ord631
ord709
ord524
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord608
ord716
ord717
ord534
ProcCallEngine
ord537
ord645
ord570
ord648
ord681
ord685
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ