eafefaa7cb5bea50e544d6eeec504008_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eafefaa7cb5bea50e544d6eeec504008_JaffaCakes118
Size

20KB
MD5

eafefaa7cb5bea50e544d6eeec504008
SHA1

b4c01342a4279273520141943a90b3235d1cdf5e
SHA256

a1d0928d69de56ed762361efcd7cafa110a318573fb83ab5d9904c9badf78540
SHA512

5bf802da3c811c7d4c587a615f46b60c1429e8198c363cf34036e35ae5fe40b723868c105a2ed18602689c3c76e7c182d43bfea5034cf1864ee0e0ef2e7628d0
SSDEEP

192:7Fi6IawKLW+okk6BckTe+6/7KDTSN+7EMGs:hiDawKLW8rBcienzKPSYYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eafefaa7cb5bea50e544d6eeec504008_JaffaCakes118

Files

eafefaa7cb5bea50e544d6eeec504008_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c3297c8d8a160af35c730f71549fd73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord665
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord648
ord576
ord578
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ