8cfe7b5912d5fd7562f5f5215507e5fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cfe7b5912d5fd7562f5f5215507e5fb_JaffaCakes118
Size

56KB
MD5

8cfe7b5912d5fd7562f5f5215507e5fb
SHA1

ce3d6645ab5c77dcb8800fe6b77429abd9de08c2
SHA256

1e8212af995c5f040c907bb0428b66d65b82fe3d3a429e5d946684d1b973b39e
SHA512

2d8e53fc20f3888989146a69b41f952ed3d2542df93f1276be5e666f62e90484807e65e1a5ef4bcfa8ba166310b0d48a5bdcf02cb0372f333e2fa6eca3c9e1b5
SSDEEP

768:pxTgciAqo7H2Dw+6jefELVnEHv8H6qrjhV4NWkxW:PT+0H7+KefEhnEkNjh5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cfe7b5912d5fd7562f5f5215507e5fb_JaffaCakes118

Files

8cfe7b5912d5fd7562f5f5215507e5fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51004106e5d9f2f5964c89c25b54d14e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord695
MethCallEngine
ord516
ord519
ord626
ord666
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
ord568
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ProcCallEngine
ord537
ord644
ord648
ord570
ord681
ord685
ord578
ord100
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ