c8b5466be52466430b270ec4e981867f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8b5466be52466430b270ec4e981867f_JaffaCakes118
Size

648KB
MD5

c8b5466be52466430b270ec4e981867f
SHA1

c16cf9756753b3115159529b5f9d8482ee19d033
SHA256

88088ba872e64c733e9335495ccafc62e6cba0492c56d0796d6ae3516c0fd33e
SHA512

e4e7f1e8398db1d8e24f8e51dbddcda5454d16dbe72873ad951d7a30b08d656441641ff4c36851932a591a1b91e0c7ea2b3d533bfd80c2748b52e08eb88b44ac
SSDEEP

12288:aMYQqLWRGzJ929T939x9O9/9g93RcYQqLW:jYJLgRcYJL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8b5466be52466430b270ec4e981867f_JaffaCakes118

Files

c8b5466be52466430b270ec4e981867f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83b43049beef92422fd5a30b2f1f2cb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord595
ord598
ord631
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord537
ord681
ord578
ord100
ord579
ord616
ord618

Sections

.text
Size: 552KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ