8cbe1ce452c87d23534796846745eea0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cbe1ce452c87d23534796846745eea0_JaffaCakes118
Size

72KB
MD5

8cbe1ce452c87d23534796846745eea0
SHA1

7794902547cdf6ba0d9f4f1eaf51d8bb55e71d63
SHA256

51efd10c38a119e1482400837c33f52a42327708b28ea5cde39a0b039f7f3160
SHA512

b186cb2f0092460f29f5df93d941deb4814de378ff95d51f52dc907e0c9b1eb6b5a1475f93c0902a88fbb7fe52e3a5addfedfd017915cd8047974b7e9b3d9f69
SSDEEP

1536:xj4DrHE3tPRzs4aCjW4s4ayZ4sJSM61nM1eqZUXVzihlO:x8DrHE3tPRzs4aCjW4s4ayZ4s2qgOq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cbe1ce452c87d23534796846745eea0_JaffaCakes118

Files

8cbe1ce452c87d23534796846745eea0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9d1e3d1e266b4be20291f61cc2be24a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord572
ord573
ord681
ord685
ord578
ord100
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ