8905f1ba417e516eb9914c69bdf58f85_JaffaCakes118 | Triage

Sharing

General

Target

8905f1ba417e516eb9914c69bdf58f85_JaffaCakes118
Size

112KB
MD5

8905f1ba417e516eb9914c69bdf58f85
SHA1

d058e0991a61c079af126b63377fd096600ed586
SHA256

2e095d8e5252fc017b50f63c0bb688babadb5f61ba21049c1f13d4f23b1c6c6b
SHA512

e5bec651c1bd15fee6b4ea93f3a6482070dded758a2ae801527d1919ec06119e820bccbabb67027ed4043c0ae33a252b208c5edb6b64835e44c617ef8af003ab
SSDEEP

1536:y4AOQD5zDzLt7K/cWbC2+1pqrz7SaX451pBZhuWaGS7Ti272eGQlL4tRMWd7tXUl:0977gL4tRMWJtkXvUgzPGxHHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8905f1ba417e516eb9914c69bdf58f85_JaffaCakes118

Files

8905f1ba417e516eb9914c69bdf58f85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b7ed2f0724133b5cc51be2dc14f006b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord595
ord598
ord599
ord306
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord571
ord573
ord100
ord689
ord616
ord617
ord618
ord650

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Fe4N
Size: 16KB - Virtual size: 16KB

.PGPJ
Size: 16KB - Virtual size: 16KB