8e61df0bbc87ff38d6e96cc453d410b0_JaffaCakes118 | Triage

Sharing

General

Target

8e61df0bbc87ff38d6e96cc453d410b0_JaffaCakes118
Size

56KB
MD5

8e61df0bbc87ff38d6e96cc453d410b0
SHA1

0e534531362092e3999f1246a2bb27eeaa751cee
SHA256

274f1c4d4ce69b926cb8cf99a8f742cd912c95fcdc47bff187cada2945e2d331
SHA512

027a0f88da48aa8fef2e3caa879466e29f5539e1171a8a7caff84e11bb02e69c5bd65748b621555645d8f06fb2eff69e7cb3a7efb538aa6b290ecfb953f1f7b7
SSDEEP

768:YP+mSdiRrBqIBsUF37qdN5iXcXT7lYMh8s:YGmSk2G2PYls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e61df0bbc87ff38d6e96cc453d410b0_JaffaCakes118

Files

8e61df0bbc87ff38d6e96cc453d410b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56677bc0ff3594acd46ca97387c830ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord669
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord531
ProcCallEngine
ord535
ord537
ord645
ord648
ord570
ord681
ord685
ord100
ord610
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ