014ac93a522c4c4c8ed4b80d2484fa52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

014ac93a522c4c4c8ed4b80d2484fa52_JaffaCakes118
Size

72KB
MD5

014ac93a522c4c4c8ed4b80d2484fa52
SHA1

8b9375fde2ab64ccfbfa67d244242df25d4e158b
SHA256

3f1d078f0618a4ecbb440a6206ee6ce180e954dcece644690e6766f1c0b23615
SHA512

8a46f92f2fa49322c4728fe3c6a96a0fcc25b243d5713732eb1fecd59a5c008e4d9e8183e7be8d2a62e9d6be8160317aefca59887fa57ce1e14f7f89ca704b42
SSDEEP

768:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPIY:ieTce/U/hKYuKPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
014ac93a522c4c4c8ed4b80d2484fa52_JaffaCakes118

Files

014ac93a522c4c4c8ed4b80d2484fa52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ