8dde793c830b80cd0591aeb9c6635506_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dde793c830b80cd0591aeb9c6635506_JaffaCakes118
Size

40KB
MD5

8dde793c830b80cd0591aeb9c6635506
SHA1

de5c9663ab999d210256592794cad1f9e4f25a69
SHA256

91afda9c6d38407699f9c9f14aec3cfc7e3bb1f803af775bd3217f6b8ba55e0e
SHA512

a2b336ee471a00e0ecf8a99c68e8d04ac9d2a7c46f16f59858979439a55c7f7dd4aadcc88d4302e722662cfe5bbeb47a664e1fbb1e9799e93201b008eecf087f
SSDEEP

384:SmDSKb6EAt6RfQputm/ZNEeNjDWY9suXs7XzY+vUmkPS2kG:SmmKb6EAt0Iwm2NvUmkPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dde793c830b80cd0591aeb9c6635506_JaffaCakes118

Files

8dde793c830b80cd0591aeb9c6635506_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5918f86641314f9ccb740bed3cce5ca7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

m

ord631
ord526
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord573
ord578
ord100
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ