ea88f6bf3249c4e4143f2c5c4be62ab7_JaffaCakes118 | Triage

Sharing

General

Target

ea88f6bf3249c4e4143f2c5c4be62ab7_JaffaCakes118
Size

64KB
MD5

ea88f6bf3249c4e4143f2c5c4be62ab7
SHA1

49156003edfcf6680b5d4a12b201c6d03a6e05e5
SHA256

96d0deed99743d960807ada2c0fe13b1689f68946c3a59b4a29ca5561d1831d9
SHA512

d6d55c479cd4e5efe401260dc86962b4b328389fcad6af83f15a203903403be8a75b96f0b3cd645c41a486fc9160f4b34e91332025f348710be32d8f3ed5bc7b
SSDEEP

768:dnlwTqzraSapkLPchaSgfdvr/56+G/+fbiJ91MXeL:dnueaSWkLPKaSgfxL5IC491MOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea88f6bf3249c4e4143f2c5c4be62ab7_JaffaCakes118

Files

ea88f6bf3249c4e4143f2c5c4be62ab7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9189dbc37647b4ffebcb02ff184043a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ