8de28c52971befa4ae84310ba2d3e17e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8de28c52971befa4ae84310ba2d3e17e_JaffaCakes118
Size

264KB
MD5

8de28c52971befa4ae84310ba2d3e17e
SHA1

c9214d9ca4fd46735d4e4eaf7286d0cb95fd6e05
SHA256

5fdb37674396fe4266dcdee518fbb1e85a5d77daa563f802645afb5844bae1a4
SHA512

c4d1ec6fe7822003359ee7b10e03ee2df015f9d2c78520cd54ba1bc265a003548343c77f35aa3d4c0bfbaec28e77a8d1941dd3f0e55ba5639529dd944c5ee0b3
SSDEEP

1536:VSK9HUG9dX4uE+V+TnWEhyCol36KA0+9PW3dyColtE+V+TnWgK9HUG9dX4m:v90m4UgTXql3o+3dq/gT890m4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de28c52971befa4ae84310ba2d3e17e_JaffaCakes118

Files

8de28c52971befa4ae84310ba2d3e17e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96ebe6594a071b1324cef3b74bb92c36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord576
ord100

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ