8c3592b5e2e5ed4a1daf66c2970b80af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c3592b5e2e5ed4a1daf66c2970b80af_JaffaCakes118
Size

264KB
MD5

8c3592b5e2e5ed4a1daf66c2970b80af
SHA1

d27a6fe3c8be6c997de138ec0d3275edee543419
SHA256

0618833eb7e59ada19f0c79923a8acf717fbc9ceffb893e2c27303113f914c2f
SHA512

3502a27045ad05027b5f4b194358dbb3d4cb3a56af7cf2d399103d2192790a1c095fd08417bd2d62da41afe5f4018e2e22081b6344c8888ab68b1e8c8f742edc
SSDEEP

3072:uB2pwi7Ed7NJRAbi/c/ut4wTIlR+QIVeDbE35V7S6BmLSpKxujsGyJeQuLyV1S0S:uwwXqNRnIVeDI/7SFVkKotkjyXs+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3592b5e2e5ed4a1daf66c2970b80af_JaffaCakes118

Files

8c3592b5e2e5ed4a1daf66c2970b80af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

460fc05b859ec7ebe93b53fd5de3a373

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord596
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ProcCallEngine
ord644
ord100

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ