c8694d72c21c4f14123e8c3f04614aca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8694d72c21c4f14123e8c3f04614aca_JaffaCakes118
Size

126KB
MD5

c8694d72c21c4f14123e8c3f04614aca
SHA1

8e9898bb0e96709220690e7d8eca557b13a087df
SHA256

e4a6eac8e3fba9e5da870bc4899cc4f7354d6ab1a2090f16f9797a1df088dd19
SHA512

c908060658b3e68f1719f721d8b37ac6768ecc9deb84492dcd04a9bb1ada68675877fba20204c2489250dbce165318b83c1fa08898eeb09f211b5a9063e504c3
SSDEEP

3072:RDJg8tOwE4WCdOtrekHDxtOwE4WCdOtrekHDg:lJG3GsHD23GsHDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8694d72c21c4f14123e8c3f04614aca_JaffaCakes118

Files

c8694d72c21c4f14123e8c3f04614aca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fead2e56ec0147a39050023312d6b4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord645
ord570
ord681
ord100
ord616
ord617

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ