ea3e808621bf7ff9f3cebecbddee9e5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea3e808621bf7ff9f3cebecbddee9e5d_JaffaCakes118
Size

44KB
MD5

ea3e808621bf7ff9f3cebecbddee9e5d
SHA1

dcd7686236e52a6c227b68dd41d8a51ee593a665
SHA256

6b338974f6919494842c62075f6ce5c3c5e82f95b85edea9c0949ea104d96a8c
SHA512

3fbd21c8f837bde7bdfe6aaf235a0f62d177f802c4a2497c3227174e664c1fcedd25dd72d25ef6f9d33eda8ce305da5073924ad328953d7537e04011a84eade7
SSDEEP

768:rm8hJ5HDfj2Fj2ZDN7bcYle7JAVnG6csj2:rHhJZDfj2Fj2ZDN7bisj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3e808621bf7ff9f3cebecbddee9e5d_JaffaCakes118

Files

ea3e808621bf7ff9f3cebecbddee9e5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96cbde962a0a7d12e9a04d8ab4512f94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord303
ord309
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord685
ord100
ord618
ord581

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ