c8ec29493ef8033d0ccf2d1fc8b45a1c_JaffaCakes118 | Triage

Sharing

General

Target

c8ec29493ef8033d0ccf2d1fc8b45a1c_JaffaCakes118
Size

804KB
MD5

c8ec29493ef8033d0ccf2d1fc8b45a1c
SHA1

1140586f6c9009fb75c19fe55db806a8af51ba79
SHA256

9ea70595e1b8fc3ba81cbd07499de5636a0a6df85f9ae641c3c4646cef231dac
SHA512

f0515b13854b13e0e1282365d015b1f65daff0fb03a4f89f6d0fe25ccd8aae9890b77e5ac2b53fdd3749ea972014499c4f76b8435f56bbff9c938fd0c63af8b7
SSDEEP

12288:m9MqurSeD3h/N1jpZNi9R+swevu25G4FiMIYkk22kBkmMkkEkkCfs6k05kqiXQkp:mOquGANtN87FiMIYMgqh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8ec29493ef8033d0ccf2d1fc8b45a1c_JaffaCakes118

Files

c8ec29493ef8033d0ccf2d1fc8b45a1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7744c71bd9f39f9cd58d4f12fbe569c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord518
ord626
ord666
ord667
ord593
ord594
ord595
ord598
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord713
ord607
ord608
ord716
ord531
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord681
ord576
ord685
ord578
ord100
ord579
ord689
ord616
ord617
ord618
ord581

Sections

.text
Size: 768KB - Virtual size: 765KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ