eef0832d64c333aca680a956dcd493db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eef0832d64c333aca680a956dcd493db_JaffaCakes118
Size

20KB
MD5

eef0832d64c333aca680a956dcd493db
SHA1

8e750324e69a620080527cf55976209b1ae80861
SHA256

59bcbab6d9d2cd2c07b7658ad9b41fd5b1f95644f4448863d5b87579d06d923f
SHA512

719bca849d478b2ab0c4947b961d9779765f39fea6179e961119a9111db586a4154c0349aa96cfad7836e19d9be7072871acc4e5ddc5edc650ea81aed2b6268e
SSDEEP

96:kZZSBTq9VeCzp0zRHxTgcJqILR8a34kRVEYMd6cp5O3uVOwdgOir/zXMbVVeCz:aSBTq9sxTgps4lYYX5hVfdgdjzXMbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eef0832d64c333aca680a956dcd493db_JaffaCakes118

Files

eef0832d64c333aca680a956dcd493db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e1501bfb9ef702b9ac1af2c33fb436a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord537
ord576
ord578
ord685
ord100
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ