8d2712c0edbe689d7c9800bd6b891e26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d2712c0edbe689d7c9800bd6b891e26_JaffaCakes118
Size

408KB
MD5

8d2712c0edbe689d7c9800bd6b891e26
SHA1

e7b6d237f3c0f8370c583801123a1e2a3c828673
SHA256

3c7682fe3a6e5f52f185bb027357c296b9e7b9ca2c0fbbf7541aa00df39d505a
SHA512

ef2fecf32d126473c151b7f1fe25f86db87155c9f75d4a1087be6541be8b75159bcb247c10aaabd1881cb1ec533b1d33aadd6001ec850353c01b2fb5558289f4
SSDEEP

3072:VMm/ZaMroEyxnubMpNzNIvExOd4s4i+aZZZN8hCQdvMaQ+IjfHwjCwdvMaQ+jbTq:bkijWCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d2712c0edbe689d7c9800bd6b891e26_JaffaCakes118

Files

8d2712c0edbe689d7c9800bd6b891e26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9d6304f81e854e02038d97b1c6e44a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 320KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ