8630d9f4f5ee60eaafa4a1fd2aee3f48_JaffaCakes118 | Triage

Sharing

General

Target

8630d9f4f5ee60eaafa4a1fd2aee3f48_JaffaCakes118
Size

324KB
MD5

8630d9f4f5ee60eaafa4a1fd2aee3f48
SHA1

b5c7d4614b2c80481d0a570c0de9f6d191c96245
SHA256

966e44278fa7d03d4b784fab2a407da1f6b9cd9ee3ab8fe7ded6f4bfd49407bb
SHA512

59e728bfb2c6fcf61bde7e78dd6379b8a7c29add54d84b6fabb4e75c3ca117f333f46db86f63b1cb255f8f87705fb9db6c0ea8dc8b79ca49a0cd35e18e6114b0
SSDEEP

3072:FHGHU46ZlohYkQr0jeLwJr95lJoZQR2jzv7IziJNhYkQr0jeLwJr95b:F74HYQqLwhHlWZQR2sidYQqLwhH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8630d9f4f5ee60eaafa4a1fd2aee3f48_JaffaCakes118

Files

8630d9f4f5ee60eaafa4a1fd2aee3f48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0331900d80d5e9c724c8548dce19fc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

user32

CallWindowProcA

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord578
ord100
ord579
ord616
ord618
ord619

Sections

.text
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ