e252f104ddee7529ab7144e06b61c919_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e252f104ddee7529ab7144e06b61c919_JaffaCakes118
Size

772KB
MD5

e252f104ddee7529ab7144e06b61c919
SHA1

0231b476fdd5a5880c5b0c9aa484b8d955ec4980
SHA256

c0fd63bf8a226d08e1176f9e992850941cd64af5ea3239191a27df3a69a9c099
SHA512

388466be84f7314c62914bc42ecfa6ee286e789e79d95ad7dd0d1f8049f4a582b3a7bdd7c528c31ec618c8f06e8c614da79a97801be9b185858c61d399a79f86
SSDEEP

6144:qA/qEFbL1jvOVPVUxGv55Z3zCAkTpF4ed83nLnOyvMsM7oEbzWPwkYQT3JdmOOzP:VtFFjsPOQnmAklyTL3PGzK9NT5tOhs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e252f104ddee7529ab7144e06b61c919_JaffaCakes118

Files

e252f104ddee7529ab7144e06b61c919_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fe4b70f2e48fee022f46ac21f8b1a31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
MethCallEngine
ord666
ord595
EVENT_SINK_AddRef
DllFunctionCall
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord575
ord100
ord616
ord544

Sections

.text
Size: 764KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ