JaffaCakes118_ebc99825b3ab7e53dfae0c89907656a2 | Triage

Sharing

General

Target

JaffaCakes118_ebc99825b3ab7e53dfae0c89907656a2
Size

456KB
MD5

ebc99825b3ab7e53dfae0c89907656a2
SHA1

4e5f182a2c555f37d66c464442542da7044109e8
SHA256

4f3874308034dd2cd43c0b98ed3e8d7a3ee6c4ff67fd2d699a04bc043a8d574c
SHA512

ccff4305231da12e001e4e0bf324d1507c1168e50dae425773e602ce752cfa9e54aef8c868070cdfbc8c833937687abb4ac08582a3ef9a7851b1f23a6c8a626b
SSDEEP

12288:zA51X5jqTD06/++DDIWjxTIgv8yLrLbFpt/iseb:zsiQ6/++ll5l/iseb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_ebc99825b3ab7e53dfae0c89907656a2

Files

JaffaCakes118_ebc99825b3ab7e53dfae0c89907656a2
.exe windows:4 windows x86 arch:x86

55a33f8a9f2ee2d184278ca6ba37f105

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord585
ord586
MethCallEngine
ord512
ord516
ord518
ord519
__vbaCopyBytes
ord553
ord660
ord666
ord591
ord593
ord595
ord702
ord598
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
ord561
DllFunctionCall
ord563
ord675
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord570
ord648
ord573
ord575
ord685
ord100
ord579
ord610
ord614
ord616
ord617
ord618
ord619
ord542
ord545
ord548
ord581

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 344KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ