eac5664cd2fab25f97ff77d9a3f597a3_JaffaCakes118 | Triage

Sharing

General

Target

eac5664cd2fab25f97ff77d9a3f597a3_JaffaCakes118
Size

116KB
MD5

eac5664cd2fab25f97ff77d9a3f597a3
SHA1

2fbe76bfa925e9cf6151a0fe31b584aad753a87c
SHA256

a195a91bc1f3f15aee140fd45961a67f761f0fe245664a0365ccf6f2a3fc20cf
SHA512

0a6209af7268b5a1675ca34b9d30748b2a6ea77d65b57a9189aa938b466adcdf89eac62ca4d2aa613e9d469b3a083ec6a226533b438fd43023086574b7cf8c45
SSDEEP

1536:hq4tkkJk77IZ+PBHsX4E3jPRC3h6WdBr1OmqgQO3It2rPzVamqQ2:g4tkkJG7IZ+P5sH3V0UWdtwVPUy2jm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac5664cd2fab25f97ff77d9a3f597a3_JaffaCakes118

Files

eac5664cd2fab25f97ff77d9a3f597a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f664eae6e2d471cd5a5fd6b6edec547a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord572
ord681
ord685
ord578
ord100
ord616
ord581

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ