8c46789ece1d96925f9291f5a2eb8d2e_JaffaCakes118 | Triage

Sharing

General

Target

8c46789ece1d96925f9291f5a2eb8d2e_JaffaCakes118
Size

24KB
MD5

8c46789ece1d96925f9291f5a2eb8d2e
SHA1

6fa38a9622c38e3d22513d3a938a4e0b29e3e802
SHA256

d099bede38e4d88e0a5702e6e6bb226e56157715ac136d3ef3d2608b95e7e1bb
SHA512

787f88b6c33dd65a588f8cc6c4db2f994f586eeee4aaadb904ec45ba534801bf8a7e5bcb77ae4a636f73e254157dc2b93d50688d72db369f6aa4c9504de8bb84
SSDEEP

192:BlK+5BqUgDQdI2rPBWNx2FYdwJITrneVXuEW6E7ZZe:BlRqVDSIysE2eW6mZZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c46789ece1d96925f9291f5a2eb8d2e_JaffaCakes118

Files

8c46789ece1d96925f9291f5a2eb8d2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3accf752917c7298a4eae1a3b0dbce65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ