ef5595233b629ec7d252a3c475614d69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef5595233b629ec7d252a3c475614d69_JaffaCakes118
Size

156KB
MD5

ef5595233b629ec7d252a3c475614d69
SHA1

2ffa1e5748c9f0ab8b6edb9248e7f9034f3e9668
SHA256

f4c25760119b8424a4a7c56a8c46b682dd7ecede1eceaa8dd3abb00850d076af
SHA512

e617a866e3e68c6721ea8b6813168418da61dd4ea051fbe2e07e738ba5cc28bb116ccdc7e4baca125f5a76fdb070f291a3ebcc60386929369a6bd57ee374c12c
SSDEEP

3072:CKloQSrkKgRENEI5apGTwQqVMTW0hiJDeaBi:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef5595233b629ec7d252a3c475614d69_JaffaCakes118

Files

ef5595233b629ec7d252a3c475614d69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25b424753b39c78481a1825cd2a82aa0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
Zombie_AddRef
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ