ed9cb2f3d3da05fc5ed9db498376aba6_JaffaCakes118 | Triage

Sharing

General

Target

ed9cb2f3d3da05fc5ed9db498376aba6_JaffaCakes118
Size

165KB
MD5

ed9cb2f3d3da05fc5ed9db498376aba6
SHA1

59036e34b960a219017329958213448e2cc191ec
SHA256

0ec6f0ebaf4d0e0d90e965467890b780ecd3165d1fa3d8159f6bda06814c7cc0
SHA512

8924201c8fb5360bc0cccebbbb600ee337e2f511ce81569162963c485f2ca26301790b8e5ba0d71ff643df803ec74537a0026596ea2d4567430553a136c41222
SSDEEP

3072:DJ60eHeen2sp7Z2gcsRxAry4yLcW9uf3/jv+Y2l2SsU5t1rb+ys9jGL7sY5:DJhZQxpZ2gcoCMB+jvH2XZ+7h9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed9cb2f3d3da05fc5ed9db498376aba6_JaffaCakes118

Files

ed9cb2f3d3da05fc5ed9db498376aba6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

979fb227ed62f6c626f50b68d5b3f7b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess

user32

ShowWindow

msvbvm60

ord696
ord697
MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ