ea768f507e7b1ac1a65cc9e7cfa52c7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea768f507e7b1ac1a65cc9e7cfa52c7c_JaffaCakes118
Size

387KB
MD5

ea768f507e7b1ac1a65cc9e7cfa52c7c
SHA1

9d07fcbb26ba11fef8b2232f3756cbee09e52979
SHA256

7370330b6786aff4c6d1880fd80f3eabf3718abfeb5a95f681f1567bdc16f816
SHA512

f53d03503f0fc2299e32ae5a5b7a9d8b3d4d211db3e6fecb5e77059e6c546a7ea38bc3dfdcb8f6a9aa56d204065b94e2495bacc27e880cac2534a597799521ac
SSDEEP

3072:tIucyK32PCjiyQhx76eQKcyK32PCjiyQhx76:lpK32PlyQhUspK32PlyQhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea768f507e7b1ac1a65cc9e7cfa52c7c_JaffaCakes118

Files

ea768f507e7b1ac1a65cc9e7cfa52c7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25f3ffc1bd12fcc49d822e3d022dc220

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 334KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ