e2ae97affafcb65764219b3f4b4748dd_JaffaCakes118 | Triage

Sharing

General

Target

e2ae97affafcb65764219b3f4b4748dd_JaffaCakes118
Size

128KB
MD5

e2ae97affafcb65764219b3f4b4748dd
SHA1

3765b0850f2a93487b2af4f93ef1b1cad3c9af71
SHA256

e46ef6f90216b0aecda8b2e906892877ed365e9a07a7701c232f7b722758f1c8
SHA512

96bd468e0f5c063b70a2d11984ab4b110fd125ffc69d2ec712c7939262d33809837652f16053d46ef64e2dcaa66cba6d5f7e58f974f7d4e56a008d5f9d2cda05
SSDEEP

3072:CfbxZHyKEY1gDTBb8kftadzyOyNE53LzqrrrrrrrrrrrrrrrrrrrrrrrrrrrrrB:CfbxZmYOT6kftsyrKJz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2ae97affafcb65764219b3f4b4748dd_JaffaCakes118

Files

e2ae97affafcb65764219b3f4b4748dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

328420e3b49c2f87a49c26a6c22f829f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
ord587
ord695
ord588
ord696
ord698
MethCallEngine
ord517
ord519
ord553
ord559
ord669
ord596
ord303
ord598
ord309
EVENT_SINK_AddRef
ord560
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord608
ord533
ord534
ProcCallEngine
ord537
ord648
ord574
ord685
ord100
ord610
ord611
ord542
ord543
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ