8acf758699c1e09da80f9419cf1e4521_JaffaCakes118 | Triage

Sharing

General

Target

8acf758699c1e09da80f9419cf1e4521_JaffaCakes118
Size

204KB
MD5

8acf758699c1e09da80f9419cf1e4521
SHA1

ec19354a4ebb11b74ba534be84524a908b1b2c17
SHA256

e4e492beb797eea08eb225d948180830a06c299bd59e8aba431c73f0e05ab7bd
SHA512

dbfaf47683dc87c071ce7669bc73c8f7f46d9066aca64f4f27c50155b17ea6b89be242b6c6526750cad02d448f8e05bf1a589c46fe038e01a9d401bde4d89a3f
SSDEEP

1536:3lnE3NgZyNM9MfXuLKehdG4y0T2iSk6lCbQ6jlTpKwuqCNQRrnkX+ZxlSADkPC+1:1E3N2pdG4y0ai7p/lTpX3Z3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8acf758699c1e09da80f9419cf1e4521_JaffaCakes118

Files

8acf758699c1e09da80f9419cf1e4521_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6826be2d7d23aaf854edb5b56bbdb74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ