0fba02fe589763025e9f74006981be4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fba02fe589763025e9f74006981be4a_JaffaCakes118
Size

24KB
MD5

0fba02fe589763025e9f74006981be4a
SHA1

ca2c50e24c7057b57d74c2934d381abf0e7afa51
SHA256

a82d1408d2ffe9e8a8b102c236f16e1a0a17eaefb98d5e5c5929e41570fbc9d1
SHA512

277d1fa4b66bc9bd80248413a97674625811ac6df6f3b478ac5c32d615094c22d457363b43482e7f20a901303242b4159d567f3d2e83d9e086bdd3b0af913536
SSDEEP

192:rpR+Gvywx7OgMVEisbpQhEuM7scdTfjyxtOrgQgtwEjBvPf1jufItepf:tvog/isbChx3wIH9juMepf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fba02fe589763025e9f74006981be4a_JaffaCakes118

Files

0fba02fe589763025e9f74006981be4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3accf752917c7298a4eae1a3b0dbce65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ