8589704626a684653803a3ad0486c27a_JaffaCakes118 | Triage

Sharing

General

Target

8589704626a684653803a3ad0486c27a_JaffaCakes118
Size

64KB
MD5

8589704626a684653803a3ad0486c27a
SHA1

4761b45c7d4b0ea7aa04ce7ab0043ea39ac11b57
SHA256

6710673179e18bee1c41d1b93203c1d40d1624fe424d9b7b6db1942c36f2876d
SHA512

d28dc9a4e842f10eee20ea1e52573f987cfcced34103d94c384f320e98f1d4f29da8994c99f773d03dde092f6c89bbd7f9bb00ae375896edf46b4d5d7ace779d
SSDEEP

768:9SQgF2y9+FKdK/wQrmSvoKcQG1h/gCDzcEGtcE9cSMFjUoH7zLy:9Xs+W0wsmvQ2h/94ELQcSpoP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8589704626a684653803a3ad0486c27a_JaffaCakes118

Files

8589704626a684653803a3ad0486c27a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e88494f4b354ccfabbdb07e92cdf8ff8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord613
ord619

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ