0fb289de3e3316fdc76ed6bd119f360c_JaffaCakes118 | Triage

Sharing

General

Target

0fb289de3e3316fdc76ed6bd119f360c_JaffaCakes118
Size

152KB
MD5

0fb289de3e3316fdc76ed6bd119f360c
SHA1

4f3f31f5bea4fc3d9163b380498e6146b53942bc
SHA256

b4576d2a49e4487230ad763a0cf35e955993eff682085a3ee6468119033a8517
SHA512

81c99910721f817e2a17b07e985215d48be476de5afd007ded4f6314dbd921e1b185ddb8744d3534678cfb06bc173d98cd884bfebf2b9ff4843f2702bc0a7952
SSDEEP

3072:fBpacwPocuhia+yXTfvS6YolmbE9aMu7ZqT6NxdmyTU8ANL8M:OJoVhia+SU4cL7ZqT6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb289de3e3316fdc76ed6bd119f360c_JaffaCakes118

Files

0fb289de3e3316fdc76ed6bd119f360c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63b3c34045b57b02a8d1b0422ccf2572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord598
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord570
ord648
ord571
ord100
ord616
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ