0acb405ef2972defd0fd8cdb0de6cbe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0acb405ef2972defd0fd8cdb0de6cbe7_JaffaCakes118
Size

84KB
MD5

0acb405ef2972defd0fd8cdb0de6cbe7
SHA1

670b05dfd134d6290c6ae6d7cde080cc18516656
SHA256

c60bb3e7201dfbf12c089dc1d3da329e370201e31b8fb4327f0c9fa6670f8a06
SHA512

a48c0eda835bc994ea38a053236ee54bb125a442483c1b53ac092cd4974d851b297d26cfb68dec258a6e39257c98fb05808828876cf804bbc796f69a8e80970c
SSDEEP

1536:o8N+nqDmQAw/4kAUgGjPmFa38AzTVu/Nv5bJt6OO:om+imxw/4kTya3831JAOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0acb405ef2972defd0fd8cdb0de6cbe7_JaffaCakes118

Files

0acb405ef2972defd0fd8cdb0de6cbe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddfb6d0632e831bd5307eb0bf2acb255

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord595
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord645
ord570
ord648
ord685
ord100
ord616

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ