8dc2a1dfdcc89b4870d4d6bb7c9f15af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc2a1dfdcc89b4870d4d6bb7c9f15af_JaffaCakes118
Size

2.3MB
MD5

8dc2a1dfdcc89b4870d4d6bb7c9f15af
SHA1

5c08b76345ed6dd12f5d018788996e5878a530c0
SHA256

d0a3fb5e02818db49845b9eead6e9c84f93dd61e69a7e1f30cce7c09952ce253
SHA512

534206a8094378ffcb5c7b9f316286bda41f50c2688c04f7c248c383d93965ca905a9831d95a52e805b20524d67dada62de969241e36ccb125737ec7ac8bb248
SSDEEP

768:emwjZaGNH1gr6If2vgDku/3lgkkWcIv+fDiH912rrEGJxd6NWi2KNx+sLStVILzT:emwj3NH1QD/VFfaq91irchWenyRd0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc2a1dfdcc89b4870d4d6bb7c9f15af_JaffaCakes118

Files

8dc2a1dfdcc89b4870d4d6bb7c9f15af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6439ccb892f285ee92ab885871e1dbe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ