JaffaCakes118_e92a2ca034a2b7f3d182a217974857f8 | Triage

Sharing

General

Target

JaffaCakes118_e92a2ca034a2b7f3d182a217974857f8
Size

740KB
MD5

e92a2ca034a2b7f3d182a217974857f8
SHA1

7d92b522db0661de49f3f43392940c24ab65ad3f
SHA256

25f2391c526ca658f731fed48b64be6a4e63785ea9a4e1d0ff60ab828077b459
SHA512

5241a745fad6610650f845ba1cd95aee4119f7aa91f6ba7397fb46b9f809c14563de386e390fe9b27a3daa01454906d28d618633b52656f045de5311625303ac
SSDEEP

12288:eolzrcMsyhrr+SUqGLJKlWtz0+7fr+SUqGLJKlWtz0:eGrQyhv+SeJia0+P+SeJia0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e92a2ca034a2b7f3d182a217974857f8

Files

JaffaCakes118_e92a2ca034a2b7f3d182a217974857f8
.exe windows:4 windows x86 arch:x86

57a1b6d9bb92bc94706feb170a303c51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord300
ord595
ord597
ord599
ord306
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord644
ord645
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ