ea6440cb2004e769a329a66f634b4611_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea6440cb2004e769a329a66f634b4611_JaffaCakes118
Size

379KB
MD5

ea6440cb2004e769a329a66f634b4611
SHA1

071f1723385194a58ec5a356226418cd4f3db0c9
SHA256

e48964f808203cb0373906ddf1901493daee0e95a8499cb4390f94fc2ed3cbdb
SHA512

7b626347f87303f4bc8aa78b71c94dbbdd685c767b9dfef3e17ebe2ab33033e56e97e7010943de9d92627afcf0f5813f7e94c044ff5caad2b741abfaa74de82a
SSDEEP

3072:kZ8h1mAkXpdrkgzXoy/zZCPiQFabz6obikfrPUox4IxpzYNwkCjQ1KuR8Ba:kChItpdrVr3sPAzx/PPhxp7XjDm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea6440cb2004e769a329a66f634b4611_JaffaCakes118

Files

ea6440cb2004e769a329a66f634b4611_JaffaCakes118
.exe windows:4 windows x86 arch:x86

560ada3e895ae3ac1685db5571ca73b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ