JaffaCakes118_8a9acc02b68fbd8fbe0af74fd5e72d6e | Triage

Sharing

General

Target

JaffaCakes118_8a9acc02b68fbd8fbe0af74fd5e72d6e
Size

35KB
MD5

8a9acc02b68fbd8fbe0af74fd5e72d6e
SHA1

509267accb091395d05609131679a5d2d795efc3
SHA256

2840cbc8b11ae2e6e8d34459a9491a459a09e9c270ba014403fee254fc31aed3
SHA512

831d77dcfc69333cbfec1ac6fcee6df55ddaa05098373828d9bc8d53e6f6905d0d03326b1f8afae43f309fb5a77ad5bc4d69af0241cc60d07e65925875b23f0b
SSDEEP

384:ZT1p4wJOBdOq6aak3SKHW7b3UU/13HrbFeWFhWzimEgijLO:N3nJOPJWKHOU63HrbHWzsgiji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8a9acc02b68fbd8fbe0af74fd5e72d6e

Files

JaffaCakes118_8a9acc02b68fbd8fbe0af74fd5e72d6e
.exe windows:4 windows x86 arch:x86

aeb8b8016b2262be9c43cad17011fdad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord696
ord697
ord698
MethCallEngine
ord519
ord598
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord676
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord539
ord647
ord570
ord573
ord681
ord100
ord617

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ