08ae17d9df8e748e1fe204f561dba32e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08ae17d9df8e748e1fe204f561dba32e_JaffaCakes118
Size

158KB
MD5

08ae17d9df8e748e1fe204f561dba32e
SHA1

a8e8439ab83de9104e0b967e9e4f758fcdc2e952
SHA256

3ad7b28a96982d43fefb1d3bcde7649cf445474cf08f347746859d32f4fb86f4
SHA512

bf3b09609a425744938db65b6f727c4dd81c9dadbbca40f009500abd3052a94c2b6283ce56e23e5486be30b689a55614a524292891bc2b91ff89fcb65b9d32b3
SSDEEP

3072:qhQntMcASjOutKDKxkCuGAASxkaDq9CWMG5:ZozDkn9CWr5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ae17d9df8e748e1fe204f561dba32e_JaffaCakes118

Files

08ae17d9df8e748e1fe204f561dba32e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

955e9a901e42d93bb500c72deb4a6eae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord667
ord593
ord594
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord616
ord617
ord619
ord581

Sections

.
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA