8f01e30e3570eaf44d02506ab44fcd6c_JaffaCakes118 | Triage

Sharing

General

Target

8f01e30e3570eaf44d02506ab44fcd6c_JaffaCakes118
Size

16KB
MD5

8f01e30e3570eaf44d02506ab44fcd6c
SHA1

30cc403cd840fe76bca897347643d5c7a5365fa9
SHA256

a6ceb3d07ab13c4b690d1a60a5e2bc3ef187375df34e62f1bf1ac80a7b135add
SHA512

a1ed3973b5483d401ba4ac624a88a034ebde0d79250cd703648628132f4ee64eb6cd817bcb0d74b7b0c13d09f18e54e0a9dabd1de8771f25d81812e478fb8c68
SSDEEP

96:mFtA5NOpfLk92iDqs62zJbXDje8SqGP++SkHSxvvttCUWvHDyTYM2:atA5qD8249U1XHDyTYM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f01e30e3570eaf44d02506ab44fcd6c_JaffaCakes118

Files

8f01e30e3570eaf44d02506ab44fcd6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f45b4d1236de51fc32e7d9285182701a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord573
ord578
ord100
ord618

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ