e27ca1bed2646bb0ae24cb0dc658c951_JaffaCakes118 | Triage

Sharing

General

Target

e27ca1bed2646bb0ae24cb0dc658c951_JaffaCakes118
Size

628KB
MD5

e27ca1bed2646bb0ae24cb0dc658c951
SHA1

fac3b22b1d2899882f56b5f0c05e57d9ab2851ed
SHA256

3619a7eedcd2ee909659171221df97f47e67c51bf03979a14b0c5c080858af6d
SHA512

019cd31ace15f36cb14443e4500a3fd3d22a84547e77ba244664c0c60db9ce0bf232f4b4e9ed1bddc478766a718ebf76d6f76a827886171d1b24328e492665fd
SSDEEP

12288:qcDmwojTtdFvv6iMu/xnw0JLg2WJz7ye/5jr4rusMIw+YxH46MFB:oLjBdFn6nuZnweg2qdVr4Ks2qPFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e27ca1bed2646bb0ae24cb0dc658c951_JaffaCakes118

Files

e27ca1bed2646bb0ae24cb0dc658c951_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e267e543ca94cd055b98db0514cf62c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord558
ord666
ord669
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord573
ord100
ord616
ord619
ord581

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuOpPx
Size: 572KB - Virtual size: 572KB