0a66045d67cdb7b6ffab08a99ceae1c1_JaffaCakes118 | Triage

Sharing

General

Target

0a66045d67cdb7b6ffab08a99ceae1c1_JaffaCakes118
Size

204KB
MD5

0a66045d67cdb7b6ffab08a99ceae1c1
SHA1

9d7ed36c03fea57d285bf98f5d65455edb4abab8
SHA256

69071c98e85177050f31e1402b736bfd4809982027cba562569e97df0aaa035f
SHA512

60aaa8d8845ab2053c5967a61a451251cc4f6ff5a761e3a741e216c2372347327a9779903ac6ea7df0034618751af01c1178c0e8837d41c9c0f3420dcbdbd893
SSDEEP

1536:CdvLk30zZ3NMsOfXu7Ke9TG4yMSmcUk6lCbQvmSTpJwuqCNQR6nkX5SADkPY+GdK:q430ZTTG4yMZc9pJSTp63ZGz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a66045d67cdb7b6ffab08a99ceae1c1_JaffaCakes118

Files

0a66045d67cdb7b6ffab08a99ceae1c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6826be2d7d23aaf854edb5b56bbdb74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ