e2538839687b9c835624887bd337fe64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2538839687b9c835624887bd337fe64_JaffaCakes118
Size

20KB
MD5

e2538839687b9c835624887bd337fe64
SHA1

5e5db3b914d5ad49f08f62c2484b92523d3bf6e0
SHA256

4349ec68c99ca614fda906746e82252d588c8e11c340451aebde05c93a08b7c7
SHA512

0bd2344f60ff0b2e5aaa2548c522309dc0a3ebc349ad25f2d00b98beab12149f7bffb82dc32416c4ddccfca2a3cf3ec12b805cc3373745b5febb4607bc1596dd
SSDEEP

192:GQ94cxlPJfBwhneSZUM0M/R7HlkN74HuO7VAb6rI:ndBoZUM0M5hkcwb0I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2538839687b9c835624887bd337fe64_JaffaCakes118

Files

e2538839687b9c835624887bd337fe64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45481f3d3f9ec465d242a8a086df0e3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord520
ord631
ord120
ord128
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ