eaa891e74ff5492c8551ef64f7260e03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaa891e74ff5492c8551ef64f7260e03_JaffaCakes118
Size

112KB
MD5

eaa891e74ff5492c8551ef64f7260e03
SHA1

4ea6c74a42771c8c8a63e54df474f41a12d70028
SHA256

479cf451dd1443c6c4d241970250ba35de4e93bf283fb8cf36095f4a1298559b
SHA512

59c3c5819b5bbc986edec6e75759f382bf0d63d0eccbb80337676454f816bf88c2605ccd0501aa7472bba396454f7c1e8e598d56d68dce37cd63e30f6652aa80
SSDEEP

1536:RM7sL+cRhq9TAPV2s7yIZynVeuCaFawaDlkpo1iSdtIdOy++SGlM:W7sL+2hq9kPYOd2QiSdteSGlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaa891e74ff5492c8551ef64f7260e03_JaffaCakes118

Files

eaa891e74ff5492c8551ef64f7260e03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19e94a6db082821148b496df5afd6a9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord595
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord573
ord681
ord578
ord685
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ