008bb97b0c77d54314065ab33420a517_JaffaCakes118 | Triage

Sharing

General

Target

008bb97b0c77d54314065ab33420a517_JaffaCakes118
Size

40KB
MD5

008bb97b0c77d54314065ab33420a517
SHA1

5ec1ad4893b1fd1b32bef83a544414346a5b3935
SHA256

05a20af74949450f4cd7395c7cdaa39e9727a750201850ee116255d03e1ed733
SHA512

059cab3c5f52b8f8378230e5ac3974123938803ff26d5582e10a62265aa3df97d447fcb1ee63c776123b4162d1b8b38e74f76f267b3d8271d62bafa79da364b6
SSDEEP

384:k14AZcBVICzZ3cl1r4c1YeUm8jvg6phQt5:ocXICzZ3Mr4cSE8jSr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
008bb97b0c77d54314065ab33420a517_JaffaCakes118

Files

008bb97b0c77d54314065ab33420a517_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1990e34d02baebfa008f16440a6ff63a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618
ord581

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ