ea3b7584f71009f2685111fa0d23ec2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea3b7584f71009f2685111fa0d23ec2b_JaffaCakes118
Size

44KB
MD5

ea3b7584f71009f2685111fa0d23ec2b
SHA1

3fef88706df9d8fd9a330920cc1b02dc2b590f02
SHA256

a975cdbca486684403f05a1106c208b0a1e73d92f58374d94bd86190afc70514
SHA512

5849222722fbfce2f364129bf000868f58d1634e85564ad19b79b3c8e5202b9861e363b936f9ac0fb4adfca20c563046c7ebcbaba75aeb638edef7472358b923
SSDEEP

384:EhfrKx6jM9LRgyO8ZOEMgaMdQo9AIl4jiCR4x+nU+x74:EiqL8ZOEWW4jb74

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3b7584f71009f2685111fa0d23ec2b_JaffaCakes118

Files

ea3b7584f71009f2685111fa0d23ec2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f84c8c77c1f175667dcdda8cd2990d27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord535
ord681
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ