8ab2d2eb6b9ce2005d4e992c8c2f43ad_JaffaCakes118 | Triage

Sharing

General

Target

8ab2d2eb6b9ce2005d4e992c8c2f43ad_JaffaCakes118
Size

97KB
MD5

8ab2d2eb6b9ce2005d4e992c8c2f43ad
SHA1

ed3dd1f43b5a62bcf1492cb3d200d28f20bc65c5
SHA256

b39874b9e42075ebf901bb5b3615b81c859262b60f3041877805f0d7de0cf1dc
SHA512

66456ae341dbcec9c6aab90d0872670e2b6714a3a502bfd4060fe6377af30bfcfc894376f31dec6256a45c604f9216eb6dcba8d7c74d1600b381bbdd907f49e5
SSDEEP

1536:euKsFtFDf4KeDUjKvIqSb4iZMLIFSxBtOGsMpnvLxkhBkq6AarzizyO5:GsgdDZvIqSbpZMWS/IqnvUDizizys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ab2d2eb6b9ce2005d4e992c8c2f43ad_JaffaCakes118

Files

8ab2d2eb6b9ce2005d4e992c8c2f43ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e17f550ba0a7bf9f0da92eae658fd47c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 564KB - Virtual size: 563KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ