8b09292369e0d4eb186444bfb275a11e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b09292369e0d4eb186444bfb275a11e_JaffaCakes118
Size

884KB
MD5

8b09292369e0d4eb186444bfb275a11e
SHA1

bace20475223f6b950577dedfa6c8990b4f8ce70
SHA256

07a68ace0e9b44a5852e355e8444202bbed11ac5e2f9e0783fc5af0018833915
SHA512

a256250d4a9460eb188116b130a51cea766f635394987e9339d96a5a04925d5190996d40418815d4dfcff1496ec48fe691a74f51a7d27e4bcc80a87950eb6321
SSDEEP

12288:4eoxRqhdPVD2uMKoqUnvnS3Ro6ahYaNPRWP:DCM/2uMKoqUnvnS3ReOOJW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b09292369e0d4eb186444bfb275a11e_JaffaCakes118

Files

8b09292369e0d4eb186444bfb275a11e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca2db87b9aeb285fe295367ca326e0c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord519
ord553
ord660
ord661
ord663
ord557
ord669
ord592
ord593
ord594
ord595
ord598
ord599
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord535
ord537
ord645
ord648
ord573
ord681
ord685
ord100
ord610
ord612
ord613
ord616
ord617
ord619
ord542
ord650
ord546
ord580
ord581

Sections

.text
Size: 744KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ