JaffaCakes118_e2b5eb3dfa6ef4b5bdf97de1ce334a82 | Triage

Sharing

General

Target

JaffaCakes118_e2b5eb3dfa6ef4b5bdf97de1ce334a82
Size

40KB
MD5

e2b5eb3dfa6ef4b5bdf97de1ce334a82
SHA1

6257896b4473dc2a9ca8f86025e9a808485e19c5
SHA256

9dff65972759ee94409a0d2ba6ef92e299eb376a6ca31fbc812cbc15f41fbd79
SHA512

e16c716ac66b70b789d098e709d8fb055f324086c956154c88e9a72081321697f57867c545364ed62b1eb6bdee242a5417ab7c8d99e7b2807c51f2f495390cef
SSDEEP

768:oZ+e+rdnwateKB5MTsX5SKz6OwoFKrYutzOTWcbkiT:C+XqwkmWcb3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e2b5eb3dfa6ef4b5bdf97de1ce334a82

Files

JaffaCakes118_e2b5eb3dfa6ef4b5bdf97de1ce334a82
.exe windows:4 windows x86 arch:x86

bab709d462353166ca51d4deb27073f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord595
ord598
ord631
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord715
ProcCallEngine
ord645
ord571
ord685
ord100
ord617

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ