0a264361a555e93966a4f0c6514e89fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a264361a555e93966a4f0c6514e89fe_JaffaCakes118
Size

480KB
MD5

0a264361a555e93966a4f0c6514e89fe
SHA1

05bc333638d30fb79c0c1076941c259946ad2672
SHA256

db8520f77c11eae478c81ef00372b1314588a0820f74e455b835aee611bc2e58
SHA512

c118bfec309e4c77e9fd48341f17f8bb94b635cc66ef67bd2b30d68da64cca11e18cf5bb1a772b4a4ff139ac646da1ba0aa4431de4b509b54f5a631218da8401
SSDEEP

6144:LDkqhfHIhQNL00LOXbeYkInQoctQSIb2stForgMqthUTi0P8xVNDOE+AZY/rh:fc/nhxSGtWwI9kLZYt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a264361a555e93966a4f0c6514e89fe_JaffaCakes118

Files

0a264361a555e93966a4f0c6514e89fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddf85dc55941f0934d791fe8d1b8057a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

msvbvm60

MethCallEngine
ord516
ord665
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 432KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ