f0ceb36e56339dc892087a72319700a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0ceb36e56339dc892087a72319700a1_JaffaCakes118
Size

92KB
MD5

f0ceb36e56339dc892087a72319700a1
SHA1

90e605c477af9a56273222f8102375f05185e777
SHA256

6c1055bc17f3e3990bca5cada1d614dc14665f533ae6e2e0f349835e2a004cfa
SHA512

65d7d6999fde0e4b5f5d99305dc6d45877d645cee8dc9d4aee41ff2343e810e295a270e3cc1a31ceedc2355a280f7b9500fb69f70b95ffa41361af3b5e569967
SSDEEP

1536:c+1hk40gB4ipErRerlJcmXk4nktVaPsRB55b:c+X+gB4V60mXk4ncVaPsRH5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0ceb36e56339dc892087a72319700a1_JaffaCakes118

Files

f0ceb36e56339dc892087a72319700a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d36a15452c11ff4efd09e7ac3269c87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord572
ord681
ord578
ord685
ord100
ord616
ord581

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ