eaa00ebcec27f3c00196652a1889f947_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaa00ebcec27f3c00196652a1889f947_JaffaCakes118
Size

204KB
MD5

eaa00ebcec27f3c00196652a1889f947
SHA1

3eb8dc9fe51566e290a8011a98783af7c46ae1e9
SHA256

177e153b5a1ef67fdc373a2fadbce94d225671091d5d8472598dd566c63c0211
SHA512

fe67ad286f493eecc4ae5fd73adc76056423c44de9b11ac25439ba73265b7f05c24db9e0862ae0ac8de39b0818259e3f93e3eddd8f82291972ae9901cbf3290f
SSDEEP

3072:cw3YFX0tQ9nLHbB9W+U1TqEYzR/mkSYGrl9ymgYUWsN0:c8eX4QxL7B9W+U1RYzR/fSmlT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaa00ebcec27f3c00196652a1889f947_JaffaCakes118

Files

eaa00ebcec27f3c00196652a1889f947_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abe8603b44f3b25eb24729987e33578b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord593
ord300
ord594
ord598
ord306
ord520
ord709
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord647
ord573
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ