08ffab0a82b850cb54cc259d9e51d829_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08ffab0a82b850cb54cc259d9e51d829_JaffaCakes118
Size

464KB
MD5

08ffab0a82b850cb54cc259d9e51d829
SHA1

6342804630a13011bbf91ab922e90f6d0ea75b86
SHA256

d25a22b20efce128803c2cb42ae7dee5affb39020878b10e31ca0a60eaae33c3
SHA512

9ff5930a15f17ac56918186f89f0eb383a59868d0af1e4bc75ccd6d574bb9d684d593cfc9fd153fd9dd853c8c7ecb860d04858d0b8ac0103851b57bab79c37a8
SSDEEP

12288:V6QAHe8fAIwgw4lAAx9BhmroAibiQHe8fAIwgw4lAAx9Bhmrok9:VCHe8fAIwgw4lAAx9BhmroAGrHe8fAIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ffab0a82b850cb54cc259d9e51d829_JaffaCakes118

Files

08ffab0a82b850cb54cc259d9e51d829_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cc5add3afde9049479cd576972f01bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 372KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ