8edb7d33e6d7ad7eac8223da9e561fb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8edb7d33e6d7ad7eac8223da9e561fb6_JaffaCakes118
Size

108KB
MD5

8edb7d33e6d7ad7eac8223da9e561fb6
SHA1

67fe0a74280f9dfa9cd2ea1a64d4decf0c6f6e5e
SHA256

5beabcf6a90851980279a7bb341ccda7aca6d8c5432d13a7bd9ea2e27f0eb7b5
SHA512

fbb9cf274d197de8e37e0e0d28b517273e544ea4574c85dc7c152e2b1023ab2d4a0bffece81b3c00935fbd99fcec8d8c9c80d8620f0f25e18106ad2a3f1966a4
SSDEEP

3072:Q+a+kEhKoHBMukLFzntyIFfDKcqdcQAnXKYE:xa+hKoHBIFntyIMcqdjKKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8edb7d33e6d7ad7eac8223da9e561fb6_JaffaCakes118

Files

8edb7d33e6d7ad7eac8223da9e561fb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a0a2fa94f6641b75987f50321ddd1c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
FreeResource
LoadResource
SizeofResource
GetModuleHandleA
LoadLibraryA
LockResource
FindResourceA

msvbvm60

ord516
ord626
__vbaCopyBytes
ord666
ord667
ord669
ord593
ord595
ord598
ord631
ord632
ord525
ord526
ord527
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord100
ord616
ord617
ord580

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ