8e22041f8ae42e8340bc426684a9c82e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e22041f8ae42e8340bc426684a9c82e_JaffaCakes118
Size

176KB
MD5

8e22041f8ae42e8340bc426684a9c82e
SHA1

2019678798826ba5b0f0c208ab4cc1d33e974a5d
SHA256

a872a45b16da0c263c0bddf9ba9eced0fd20bcb12a72d0081f34cdcaa49b8795
SHA512

eba99ffa75edfaea89b2afe40f4b44a5326e1dd08418f7f0cc286c6f6927237ea84b17dd0dc545ac317a8284a71ac5c87681607a62a4606bbf17323476dad702
SSDEEP

3072:kcZKloQSrkKgRENEI5apGTwQqVMTW0hiJDdO+va1l19:Oa1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e22041f8ae42e8340bc426684a9c82e_JaffaCakes118

Files

8e22041f8ae42e8340bc426684a9c82e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bb3820c0f7ca98a0bd7397af35b8a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord303
ord309
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ