ef46af192f73e8a63d1aff5806228ba0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef46af192f73e8a63d1aff5806228ba0_JaffaCakes118
Size

32KB
MD5

ef46af192f73e8a63d1aff5806228ba0
SHA1

2ffaecbe98ba463e1d4d421bb9c7f777b941ce42
SHA256

d111ea22d49ab28cd9d6b36ea133981dd77b7be8a0ee438be56ea9fde0d5ed84
SHA512

f6901d17b6da9d15e265d316b576564c7f7957d1639e1c77c1aa5d87c2108b30a2eff6a71abb530c47c4e6facbbb73f66d4900f578c70c2f5b18fd439bc8eca5
SSDEEP

384:pRsCm8/QFq9c56ykcQ49jxMeMX59VdByE:pBjZM6rcQ496P59ByE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef46af192f73e8a63d1aff5806228ba0_JaffaCakes118

Files

ef46af192f73e8a63d1aff5806228ba0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33531681d16115ce69ef93f9a12b3438

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord660
ord595
ord598
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord681
ord100
ord689
ord616
ord650
ord546

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ