eb6b6d40595233e43c29ee3eeab44238_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb6b6d40595233e43c29ee3eeab44238_JaffaCakes118
Size

36KB
MD5

eb6b6d40595233e43c29ee3eeab44238
SHA1

9f916ccbe726339234df8e3f3536ac000652a5ac
SHA256

33df8eb1a619e00a226293d08d8a36545d265017ec131918ea401cacbc9482a6
SHA512

eb815283ccc3fd9d21e9979019abc060ad02aa4a893eba12ca5d7470d219c6624065f5360e505d1ff72b61365b4d35d894e534199a27747b83ce4e9e30e7b26d
SSDEEP

768:XLYcK2y8xiSlTSDa2NBPhHaqPQA+6J47Wc0l:XDxbxMhRI3Cc0l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6b6d40595233e43c29ee3eeab44238_JaffaCakes118

Files

eb6b6d40595233e43c29ee3eeab44238_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fbac5be6d12f826c4438c268699f4de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord573
ord685
ord578
ord100
ord616
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ