0ad565506a83442998e7c24dd43539e7_JaffaCakes118 | Triage

Sharing

General

Target

0ad565506a83442998e7c24dd43539e7_JaffaCakes118
Size

516KB
MD5

0ad565506a83442998e7c24dd43539e7
SHA1

6ed15e9700f5477c2a12f6f220d64ffa9f34c13e
SHA256

8afbe607333312ac51210bb03ebb22a6eae627727c86741c5b57c9c598a605a0
SHA512

5f162211a7782b4d64cc8c26301189b36bbdadaff8ee01516157ce48569e6ba0d2ea86f7342b9d020910002c886b3e0bc88c8a1e1b2a847fce173ffa495cee6e
SSDEEP

12288:LC0zjIwXp0xONnCI78z/WpXmIdPxjIPruRdpxDM:O0vZ50MWMzdKPCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad565506a83442998e7c24dd43539e7_JaffaCakes118

Files

0ad565506a83442998e7c24dd43539e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0471d9f3d9f142373524705d6a5cb951

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ