0fbd098de1373b67e8f7efb931d008aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fbd098de1373b67e8f7efb931d008aa_JaffaCakes118
Size

81KB
MD5

0fbd098de1373b67e8f7efb931d008aa
SHA1

8f902eb5b4aa9fdfa317d05d783e1a2662d36e39
SHA256

d7f8bd95adcbcbbe468f8f14daf5dc9baf8196c1054aba61d32caa40609ceb97
SHA512

a334f4605c9d0b36397e78fdab62e7f4813660f5bbcb257245e6c2e32d0d7560fed8ff7f7242bff7cfd546550fc5c8614b8bb9decfba240ab60142d894fc6d73
SSDEEP

1536:nALpQaDQWh2Lwl93jE1RHzpdy1X/z3wpkMJlhGzZpslOTiZ3ALee:wlDQMV93jmTeX/z33MJrGzT9S3ALt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fbd098de1373b67e8f7efb931d008aa_JaffaCakes118

Files

0fbd098de1373b67e8f7efb931d008aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.
Size: 272.0MB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ