0a93351d0cb7b6a1f453b5dd65cb6768_JaffaCakes118 | Triage

Sharing

General

Target

0a93351d0cb7b6a1f453b5dd65cb6768_JaffaCakes118
Size

852KB
MD5

0a93351d0cb7b6a1f453b5dd65cb6768
SHA1

35d5a7c203ab8b90a7ad21b52c832edf8ecbb034
SHA256

194f29375db8c47fef69a5ba5237777c03ada45063479a46e040af7d2e76129a
SHA512

0729008b380bc680766163a5c8fa4ed4655c63b9729670425288d00c45c393eb27252628963de506837499fd462adc04ac358024ead3b8edf1fb01ca59567300
SSDEEP

6144:h9PnnaAYeiEt9ZxDNt+at9ZxDNt+BHec5amcAE:jnaTeh9jNt+c9jNt+BeWaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a93351d0cb7b6a1f453b5dd65cb6768_JaffaCakes118

Files

0a93351d0cb7b6a1f453b5dd65cb6768_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0de4c2dc6a84f900a13dc5e9b14aa55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
Zombie_AddRef
ord681
ord100
ord616
ord581

Sections

.text
Size: 664KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ