08f32d1bf472ab2de0115e3ddc227323_JaffaCakes118 | Triage

Sharing

General

Target

08f32d1bf472ab2de0115e3ddc227323_JaffaCakes118
Size

3.2MB
MD5

08f32d1bf472ab2de0115e3ddc227323
SHA1

22a012d7ffa7981e5839059f36fe2e62e5af1cae
SHA256

5db0608a20e35f60d8b8764ce0f8748898cc58c6606cf7907b071489468fcb7f
SHA512

512e8b83cec772eb8e6a1d28a557c3639255c95ca9e0aff6bdfcc7a0de66ba1bb110765a99cdb1ef07b12531f2b2e94c172324689865e6680dcbb6813816a7c2
SSDEEP

98304:u4JjYdkLsQ8n1bK0tDhswJ42t+zgGpei5wTK:P+Zu0dNlpO0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08f32d1bf472ab2de0115e3ddc227323_JaffaCakes118

Files

08f32d1bf472ab2de0115e3ddc227323_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6c30b11c914824bcc6cf5f7dc37339c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord531
ord532
ord717
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord100
ord579
ord616
ord617
ord580

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ