108cb977ade3ebf0903fee5021ab3c8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

108cb977ade3ebf0903fee5021ab3c8b_JaffaCakes118
Size

28KB
MD5

108cb977ade3ebf0903fee5021ab3c8b
SHA1

085b45bab573305b12af283866c88cb3b10096e4
SHA256

9932a526447bcbeb67c6cf1d73dad11ef17f214da164f2898a9e25c739022d6c
SHA512

072dd56c6d92f042ca4b5b00177dbd0243e335e90bf3953718fc92c624cbbe33e8f7fa90c4315bc7fc535647e553a5a0adcf008bcd00d614af7238f877d988bd
SSDEEP

384:Y1d25N1CqL6yFHVkmz92pDhDB75EZeMkAVIF:C25N1ZL6yeDhDBOZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108cb977ade3ebf0903fee5021ab3c8b_JaffaCakes118

Files

108cb977ade3ebf0903fee5021ab3c8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5d980ddaf5082d19ff2cd1b98a78a21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmsystemGetVersion

gdi32

GdiGetBatchLimit
GdiFlush

comdlg32

CommDlgExtendedError

msvbvm60

ord187
ord698
MethCallEngine
ord516
ord306
ord307
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord675
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord318
ord717
ProcCallEngine
ord644
ord100
ord617
ord542

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ