JaffaCakes118_8a9bf8a67263cc689dc474a929d6c0af | Triage

Sharing

General

Target

JaffaCakes118_8a9bf8a67263cc689dc474a929d6c0af
Size

113KB
MD5

8a9bf8a67263cc689dc474a929d6c0af
SHA1

42662f4cffbbf485f4695493f1f3b50fdf693bc5
SHA256

2343fcf3df91658da5dc7804fccbcd17359c7fea63aa8758790cadfa8ce0c356
SHA512

1850a44ee705ccab06d2415c91953bda6a927dfb5579cf25d24d8899c3b62391e97b50a83a23006e70cbe4933be75a2bb92d2b9027d8438c428ecdb27e89b33e
SSDEEP

1536:jGZc+10/J2MqtyEyB8y9Ty/2f4putCX45UGR1RrcwOq67JFrRi77zh6/8ZD8UC4:yK+GJwK9o+f40aGpwwxkF1W7N6wD8j4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8a9bf8a67263cc689dc474a929d6c0af

Files

JaffaCakes118_8a9bf8a67263cc689dc474a929d6c0af
.exe windows:4 windows x86 arch:x86

47d3e89fedd03caf8015c1e52370d748

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord519
ord553
ord660
ord598
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord570
ord648
ord578
ord100
ord610
ord616
ord617
ord619
ord542
ord545
ord548
ord581

Sections

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ