e1dd608308d7f9a7fc2996f5d415ab87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1dd608308d7f9a7fc2996f5d415ab87_JaffaCakes118
Size

144KB
MD5

e1dd608308d7f9a7fc2996f5d415ab87
SHA1

d393f7446156be6465f9cb6dbd6e74b5401e026e
SHA256

4c083c40e29dbce36a6310b4be149d265e8799caddb1e673cc84425368e85a0f
SHA512

e4e12c6eff5b1f3cd6065276f5357efa66e59d36e1635927c6057c4a687d0893b61a73143e741c3bd58655ec36b344085fe41942bd6a8ee5277c689bd9b2ae65
SSDEEP

1536:pCd2mNTIJiG/wtWzwNgUoINaHyoIJyXdwwVw8qlbssiKGPhn:sIJjOWRUNaHyHcPGhGPhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1dd608308d7f9a7fc2996f5d415ab87_JaffaCakes118

Files

e1dd608308d7f9a7fc2996f5d415ab87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25610d32056afbce54f3613426a839b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord516
ord593
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
Zombie_AddRef
ord573
ord100

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ