efa9da398f34d5305221a942e93eca63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efa9da398f34d5305221a942e93eca63_JaffaCakes118
Size

32KB
MD5

efa9da398f34d5305221a942e93eca63
SHA1

f0249862e89ae474ffffc7cf90ac158dc2357b74
SHA256

d386442ac0e792b6c9d074297741afff9ad0551d3011bf0d4d6fd38626e53e9b
SHA512

dc8efafe0cd052d86c16048a606e83973eefab7f74bfdc78ecf73e1299de07417c0dcce4bdba888165405bd3f3fa8a3bfa3d30f612215b231802c911cd169546
SSDEEP

384:/1Sksx+Rmtw1c0z1psn/Ex2SdSIXolfZngDmUh1owJgGDIcsZ:9Skq+RMwq0z1ps/Ex2KolUmUbqsFsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efa9da398f34d5305221a942e93eca63_JaffaCakes118

Files

efa9da398f34d5305221a942e93eca63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

935207fbee760a7a61b86dc6ca61d041

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord662
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord573
ord100
ord546
ord581

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ