8eb1a12738c3d79bd990e50be77fddc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8eb1a12738c3d79bd990e50be77fddc6_JaffaCakes118
Size

16KB
MD5

8eb1a12738c3d79bd990e50be77fddc6
SHA1

d8050fc276186092e183f2b5b0a1893798d2e8cf
SHA256

1b87dde643c763921bc8f8ea1e7718a6094badcd2ba869e83ba83c3c2b15009f
SHA512

c10d3658c22d738f26da0bcbbecb24baa56c5a31d473d2c7718e3a33885dd6f3ecc90185c7eb48d03d4fbb33df1cc38202e8d19c28bdd78eb87cd11a45e6e313
SSDEEP

48:ygKJc6xAm26DIAgv0mfrPZPe6w/D6V1ZsbCPHXluAg2HGp4vrM8gKJpdw3wXAfb8:qo68RVmZoUC5vrM8gKJpd7XAfblEsbS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eb1a12738c3d79bd990e50be77fddc6_JaffaCakes118

Files

8eb1a12738c3d79bd990e50be77fddc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b5c25a7ff1fba42392d28b680ea9888

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord570
ord648
ord100

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ