8de0c685c8eefcd768f5db37423e7c74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8de0c685c8eefcd768f5db37423e7c74_JaffaCakes118
Size

20KB
MD5

8de0c685c8eefcd768f5db37423e7c74
SHA1

260ab8234001c5294821483060673ef351cee4bc
SHA256

28aa4c3493d559d900817e78a9f9e03a84fadadedfe649d71a86d7c7db48eebe
SHA512

43be42b5838790f1a4b14476f0acfd505c7de0c9e7e9e41599dec2c0abed1ba76a486876a430937f8382e00de8f0c6ec17041a3e47db1e362699b7841068fbd8
SSDEEP

192:Tmh3VTaaR8nRGgdvSolUtIyDPPhWVOQPpmPs:TmJVTaI8npdRkr0n6s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de0c685c8eefcd768f5db37423e7c74_JaffaCakes118

Files

8de0c685c8eefcd768f5db37423e7c74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

560ada3e895ae3ac1685db5571ca73b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ