308f7a3d90179ac65e56bde6637ec12b_JaffaCakes118 | Triage

Sharing

General

Target

308f7a3d90179ac65e56bde6637ec12b_JaffaCakes118
Size

20KB
MD5

308f7a3d90179ac65e56bde6637ec12b
SHA1

40a384dee71cb0b8fcebc5d846d1c72db95901c1
SHA256

2ba444db102363eb6f5cc5b6b4e8c9f85cf325aa640731b2dc03ac972222b920
SHA512

6e7262733fd2bd43644c9c8f0309a0f7714908cc1e52009f91ff9767ade489b87929e538b9db6dfc4ef515ffe3087c03c33ed7305b1c04c94b5cf9dfa459fd9d
SSDEEP

192:sbIuwVwXPhMPUQFABLGIlXvK1QIO9ZoMnF23mmXZs72EX:sSHAVZBvK1S3FkmUmX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308f7a3d90179ac65e56bde6637ec12b_JaffaCakes118

Files

308f7a3d90179ac65e56bde6637ec12b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff907eab410ef15da6df8e1f291563ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ