ec1a4ed31fd044388c048d634ef35e80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec1a4ed31fd044388c048d634ef35e80_JaffaCakes118
Size

52KB
MD5

ec1a4ed31fd044388c048d634ef35e80
SHA1

e9b95e2cba9293d3efd1300046f4072ee82cf787
SHA256

c12083bf51a32b50a3afd711074687e88a345f39b6f2bd25d53986e306273be0
SHA512

2ac4ecc266f2c7b81fb061781b35ddbbb7d1a8dce03f31f17ee07262aa22ea5b615014d34f6d30c7fdb9136de8c82a7376d4dd4de604caf654096aa07214ec04
SSDEEP

768:0cSG0s8LbauZXzN28/Wwk9sogEQIK8BBNPzHtMdCgl9x6MWHpaeE3MWBGe:Xg3lXcu3rjfIK8JNqCgl+MWJaL3rBD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec1a4ed31fd044388c048d634ef35e80_JaffaCakes118

Files

ec1a4ed31fd044388c048d634ef35e80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5c8aee02ff0fc887b93f482a6327f9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ