00884efd8e97591b58cea1593f43871c_JaffaCakes118 | Triage

Sharing

General

Target

00884efd8e97591b58cea1593f43871c_JaffaCakes118
Size

272KB
MD5

00884efd8e97591b58cea1593f43871c
SHA1

edb75c3d131edda48c3b3038ce4e33ca54b16e8f
SHA256

5c3b6d17c46e5a52713db6f1b08e4d8ce6c8a9e3ba0dcb2db15ec4e38c7e60f8
SHA512

152f86c1f6a3fe203d0ea4d3d75368e3b08fb3348ed5a746ef35ebd0b9e2be83a2a9b5b2beaf3dad60ea16531caef58e37bec67cb3a04f1dd2c7ef594f54d127
SSDEEP

6144:lZJGX++nTWtWqfPCwsiSaZJONNcs6BQlfFd6NRB:HEX5ncWgS6O2s6ufF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00884efd8e97591b58cea1593f43871c_JaffaCakes118

Files

00884efd8e97591b58cea1593f43871c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4cdf6c1d5d09a2827d69037ec87b697

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA

winmm

mciSendStringA

user32

LoadIconA

msvbvm60

ord696
ord697
MethCallEngine
ord517
ord519
ord557
ord666
ord667
ord593
ord594
ord595
ord520
ord709
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord100
ord610
ord616
ord617
ord618
ord652
ord580

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_MEM_READ