8b614f34ffdb5114fa1f7802f77ca3ec_JaffaCakes118 | Triage

Sharing

General

Target

8b614f34ffdb5114fa1f7802f77ca3ec_JaffaCakes118
Size

52KB
MD5

8b614f34ffdb5114fa1f7802f77ca3ec
SHA1

faff915436111a8c96337180ffd5ab747cdd0066
SHA256

0b6b06a57d4e9b8d2b5f2936eadf137d7cd7a8a0f0758bdd6425728c7c0ba762
SHA512

19764b051cd41dde9bc5b1f9d29f5c37422331996c389b4f518071378f204bb4bf1c49aa1bf1cb594d04ce3ecf3d75745c550e6121bb080282fc92609ebeb8f7
SSDEEP

768:mU6jSgDV4B86s0I9dj0hBlxqJ8Uv8wCywR:PwDh6rI9djcBC8wP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b614f34ffdb5114fa1f7802f77ca3ec_JaffaCakes118

Files

8b614f34ffdb5114fa1f7802f77ca3ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

586f65b6b4022d092a935d2479668b13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord665
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ