07cbfdf488aadcbc10ee5eaac7c11d3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07cbfdf488aadcbc10ee5eaac7c11d3f_JaffaCakes118
Size

228KB
MD5

07cbfdf488aadcbc10ee5eaac7c11d3f
SHA1

1cc33576ba3ca0fe4d7b44cc8fc6dcd9473c272f
SHA256

2bc81db91da5b38f4257fa32b048c9c38017f0edbe14450f7806325cf61ef043
SHA512

4dc21b99ea3570fc9a6f4607da7d25db9dee9a4b3c099701f970c0edcf8ca96aa166a8ed72b035991584df0fa5896d2224f6af9207a793bafbe75172abce0d34
SSDEEP

3072:8rtPMZ7j+VUurcMgfimfjGBa9z/P98T0Tba1vckSIk6c9K:cBOmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07cbfdf488aadcbc10ee5eaac7c11d3f_JaffaCakes118

Files

07cbfdf488aadcbc10ee5eaac7c11d3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83b8fc2276b8e68b9ec4ff820db1520f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord595
ord597
ord599
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord619

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ