8225f6d196319d919abcd7e8298e1918_JaffaCakes118 | Triage

Sharing

General

Target

8225f6d196319d919abcd7e8298e1918_JaffaCakes118
Size

250KB
MD5

8225f6d196319d919abcd7e8298e1918
SHA1

d6e83cf077304691ca2953f556c79627f20a330b
SHA256

f9ce41f5e65f694c982a8a0b13753e7f08e6e98c69f9d2f475acaac1898a4852
SHA512

8397d1ef7ca510c38efb29b331fb9ff0f150a6206047007393159da4b16c8b0369ae0fbcc8c4be4e5ee7c04ffd0fbd62edb7337513310e1703839a71785706b9
SSDEEP

3072:HZzsMY+oDFTZb918tHb9IEiGi+XuVGtF1tQ+SC4aLUmedTHDp4G:fY+oDVZb91OZIX2uCXSfEPuHSG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8225f6d196319d919abcd7e8298e1918_JaffaCakes118

Files

8225f6d196319d919abcd7e8298e1918_JaffaCakes118
.exe windows:4 windows x86 arch:x86

119bf74dee34bb6724164cf859da5417

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord665
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord100

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ