8268a9e89a1fbb5bdc8948ae1b7bc549_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8268a9e89a1fbb5bdc8948ae1b7bc549_JaffaCakes118
Size

192KB
MD5

8268a9e89a1fbb5bdc8948ae1b7bc549
SHA1

0c010f978d0f71dab5f1239c5143161082f45c46
SHA256

bf3c1148374f00ee6207408c0c0f380dc73ca41af72fa339b7183fef77977f5e
SHA512

6ac5c9814287d95b24bc1944569d5cf10fdd6bf78904b83953b2da424bbdc8b2f1ae5923ef44ee1f56072b8a25ae982a7e5c14ae1f0edb369f4fa76564df1a4f
SSDEEP

3072:FIdcFLEdskgrt05bnwhVh6PTPGZLaiSNHRgu+PG1gGk:GWjZ0xCVh6iZL9ICu+PG1Pk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8268a9e89a1fbb5bdc8948ae1b7bc549_JaffaCakes118

Files

8268a9e89a1fbb5bdc8948ae1b7bc549_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ