0a52b2795c449bcffe49bf03cc0560db_JaffaCakes118 | Triage

Sharing

General

Target

0a52b2795c449bcffe49bf03cc0560db_JaffaCakes118
Size

28KB
MD5

0a52b2795c449bcffe49bf03cc0560db
SHA1

0ac0d6cab0cb2555a4b99e7429b4d5d7e24fb1f6
SHA256

eb7d26cb8c07357cd0e0cbf3f6ce004ed024ec495c2deb4f99074a99a060a122
SHA512

bedb68d68d6c3e8818bf7e60c29aa7580d67632d8c53bb728f7639f90ee7a1c79178f718d5b30b4508c0ece9be95321d02fae72bfa4943cc4cf929429fb1e20c
SSDEEP

192:BVh2+POvvWCm6TfoXvv48UDiiN8Ey0GDTQh0pX7VOX7bQ5oKila2CWWHY9utRYgy:BnNLh/vXgiQUViwLilxCWWHYYtRGKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a52b2795c449bcffe49bf03cc0560db_JaffaCakes118

Files

0a52b2795c449bcffe49bf03cc0560db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7825319ea1befbce6eeaa4e8702e10a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord519
ord595
ord598
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ