8781f525a28547da5352c13a7d3f2b78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8781f525a28547da5352c13a7d3f2b78_JaffaCakes118
Size

24KB
MD5

8781f525a28547da5352c13a7d3f2b78
SHA1

36653103fd94a48c2e2e73d44410da47d5fcff67
SHA256

d414b3e3a10e5a23ce4fc943a672dd51f9308ba5f147e650e0d2b8dfbaffd04d
SHA512

57a4193b851aa014b9243eb7c5ac030ebc808d39845dd0d1e0e1067a4d8b42ddd5cf1208b3a5106af7555953a54c2bc043f6cfc624bbe420dd37e0c1571f0e58
SSDEEP

192:UTtt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:UTttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8781f525a28547da5352c13a7d3f2b78_JaffaCakes118

Files

8781f525a28547da5352c13a7d3f2b78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ