00c8c7146d8cd13ee3edca52c09c74ed_JaffaCakes118 | Triage

Sharing

General

Target

00c8c7146d8cd13ee3edca52c09c74ed_JaffaCakes118
Size

124KB
MD5

00c8c7146d8cd13ee3edca52c09c74ed
SHA1

18e3e7f1f38f8e8a3ff94b02604b614b0f3e704d
SHA256

71231d59df7a3dd4ea7c28218e5b3a6aee3c6a5f7a7403e88144b6a5f2d441fb
SHA512

df10e8fafec9e871f40ab385a2d377ddefdd4e73f2de8b84d730361ec2f42ffccb672b53ee15bab423b7f071c2b6ebf6b8eaf1c9cb6711f1b2937a521121ad5d
SSDEEP

1536:ZxtkjwTQfU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeRPNeG0h/y:1kjXfU0GgAT9QIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c8c7146d8cd13ee3edca52c09c74ed_JaffaCakes118

Files

00c8c7146d8cd13ee3edca52c09c74ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f544a0bdfba876b06cd3ddbdebdc2a8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord595
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord681
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ