08087dfeb5e968d61221a7d28723c3d8_JaffaCakes118 | Triage

Sharing

General

Target

08087dfeb5e968d61221a7d28723c3d8_JaffaCakes118
Size

40KB
MD5

08087dfeb5e968d61221a7d28723c3d8
SHA1

e9a6f1606ae25289987406514a8428d544aace8f
SHA256

01e0261e590dfddbdad0d8841e9da442ac568976c71028484893f0df6b0b4eef
SHA512

33d75cf8db3700956e9622e173a00fa7a0e541bd45ee30311b291ff1259292b78503a9c53a09e38c08ae3b6fb66f32a7abae47db217921f4f79c8c42916ce443
SSDEEP

384:x4gtcmgiGZCtdwxr5rizfkw0Gtj9tMeI8GJqked4o2qwNLWupB:x455xxr5riQuhoeVrp4omBWE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08087dfeb5e968d61221a7d28723c3d8_JaffaCakes118

Files

08087dfeb5e968d61221a7d28723c3d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d691cc22d17e8687cb046770a00fc6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ