8a219a54406b23d6fda70f03b2794d94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a219a54406b23d6fda70f03b2794d94_JaffaCakes118
Size

332KB
MD5

8a219a54406b23d6fda70f03b2794d94
SHA1

4311b301bdc5ad4ea5933d1072526dec20645c6b
SHA256

08802a60e6ff5fced4a2d415759d01efe39c0b4c2533313a4510122854a3685c
SHA512

af4c1de2ae9ac85b73cf1af74697fa996dbcf52bd6b0205971dbf5ee5ffa8edc3ecfb92039675ba8e631bd8c04a6a9a6d2a60c295f32ccc41678b50e426f8ac4
SSDEEP

6144:giQUa0ZQnpGu61u6j7z/AkLKKV8sNQPgmnRZQTwh4+ME:/ZQNMz/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a219a54406b23d6fda70f03b2794d94_JaffaCakes118

Files

8a219a54406b23d6fda70f03b2794d94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24df5b7e3da9edc8e770b5f8d2e3e089

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord593
ord594
ord595
ord598
ord599
ord520
ord525
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord537
ord573
ord685
ord100
ord610
ord616
ord617
ord619
ord581

Sections

.text
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ