254fad9c0549a7c9054735b75d12e3c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254fad9c0549a7c9054735b75d12e3c7_JaffaCakes118
Size

360KB
MD5

254fad9c0549a7c9054735b75d12e3c7
SHA1

4b13d2e0b73a2c1731822a0416a45d0ed995bb78
SHA256

ed5f26b252a9be6678fe57a1744fe46126861faa366fd908800146a29217f9a9
SHA512

616eef8a27b9379f2cd16fe533d95a8c8ecbc0205056ce80472d36ad2d2d258171e036e49647cc0f62d4c8abe6aa3873a15dbf2127f7b7030dc15089e346fc02
SSDEEP

6144:mKExwRfhCDTX1jvMYhS4oLzXJAblKgbsJnk2AiiWsiYbVPnNWn2OoKy:mKExwRfIDxDVEHzZAblKDkLNWsHBlWn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254fad9c0549a7c9054735b75d12e3c7_JaffaCakes118

Files

254fad9c0549a7c9054735b75d12e3c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4d49c6222e20896f8aee15ded654e6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord619
ord581

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.snake
Size: 280KB - Virtual size: 280KB