abe300564511a30fae7e7248f704b7e1_JaffaCakes118 | Triage

Sharing

General

Target

abe300564511a30fae7e7248f704b7e1_JaffaCakes118
Size

548KB
MD5

abe300564511a30fae7e7248f704b7e1
SHA1

43954340f7dcee1cc820d7f6533362d31a8b2485
SHA256

1a248a52f78dc5dad37a0eabd2beb47480890e1742707d4780cd454e4791bcb4
SHA512

88be09fbfafffbdfecf167ccfa23a0992114c30e9e3ebcf0e5c8a0092251ee645e6ef8bbcc93a9e531758ec5f9e258c48ab78442be91503b7fc12e60e852f0d8
SSDEEP

12288:qdnY2XPBf5kesOWlUYB3kNNQYP1YNwjsvd:2nHXPB5kdBUEYP1gwAvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abe300564511a30fae7e7248f704b7e1_JaffaCakes118

Files

abe300564511a30fae7e7248f704b7e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b615268a0568f5f5ca09c8d458367e49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 472KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ