08b3d6af164167d6396acf80e78fa92d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08b3d6af164167d6396acf80e78fa92d_JaffaCakes118
Size

76KB
MD5

08b3d6af164167d6396acf80e78fa92d
SHA1

6432e832a72d94f19f16be18418c4e8de38b8caa
SHA256

f42b9a6ed493ef6843e00291330febbd289c154f58a222fb87e5c08438cf6f43
SHA512

7ea55464f88e58de50c76f065397c4c422c860c29b1bf8a2d2ab39268cad130c3bc006de75cad063325c2bc376ad7de0b1fb65d8b590379af9c261bbf4ac9643
SSDEEP

1536:IlwvnETLRRDmRDMJh9EMe/3K8HQcMcUKw:ISnETLRAD4Pe/3K8HQA1w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b3d6af164167d6396acf80e78fa92d_JaffaCakes118

Files

08b3d6af164167d6396acf80e78fa92d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab2ea612c07f1dbe72571751d2c48324

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord520
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

.data
Size: 24KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ