14ac4d03e52668c593462ec554f5aed9_JaffaCakes118 | Triage

Sharing

General

Target

14ac4d03e52668c593462ec554f5aed9_JaffaCakes118
Size

128KB
MD5

14ac4d03e52668c593462ec554f5aed9
SHA1

9d7e5b98aca121d16103286305600ff173e9269c
SHA256

fc938fbb55091f4754fc3d164d50e280a9df38d8819193800f1e1a9d0f13672a
SHA512

61322e7a54daef9f8c8209b9dace846ab70f964efd1cf51346a544c2168a69f31171f00b1639ce813a9e9d244957db98edd825462b7b8b5ddfa29309d7e79109
SSDEEP

768:gDbM0G1aIeMT2eaxg83PuUeqTaeBBW+9BkhtLxzjroQTo2jzr/fDHLVQIAxQQ:gnMDaacg8GtyTlML1VfjLHlAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ac4d03e52668c593462ec554f5aed9_JaffaCakes118

Files

14ac4d03e52668c593462ec554f5aed9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

795509397dc109a7733bf6ddf62b0995

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursorPos

msvbvm60

ord690
ord187
ord588
MethCallEngine
ord516
ord661
ord557
ord593
ord300
ord594
ord595
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ord318
ord319
ProcCallEngine
ord644
ord570
ord681
ord685
ord100
ord689
ord320
ord321
ord617

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ