ea024bd895252ab19eadf53d40c23353_JaffaCakes118 | Triage

Sharing

General

Target

ea024bd895252ab19eadf53d40c23353_JaffaCakes118
Size

28KB
MD5

ea024bd895252ab19eadf53d40c23353
SHA1

02e9a1558470630b231bc490431df30cce7b7985
SHA256

7cba85f41892bd314c36c04da87954e6ef98773e61b544f15d4618f30ed61b07
SHA512

c9940cca1484ed6ae74b79d9256d2bceb62bb89240b9567b800bf4c663681dcd40cfeb4850066b892f5078df97cd0ffd0bc76f9b5ec2f519b093a7e8124d25df
SSDEEP

384:vNDdHcM3y/FgMY/lnflPir4sIcKjKKqCCSJ4lD/hiIDgqgS:FdHC/FgMY/lfImuSTKgqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea024bd895252ab19eadf53d40c23353_JaffaCakes118

Files

ea024bd895252ab19eadf53d40c23353_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3931d856198fc0c285ee48cbcf10dfca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ