0b83faf4f31e32d2682235be8760c868_JaffaCakes118 | Triage

Sharing

General

Target

0b83faf4f31e32d2682235be8760c868_JaffaCakes118
Size

32KB
MD5

0b83faf4f31e32d2682235be8760c868
SHA1

cf4e9a2d396a3f7e0fc76098c6608af34749526a
SHA256

99bae6d9820d58efccc586e5e5c35fa19fa950b59b7187a7e5c37e47c73d48e0
SHA512

1aa446ce857182b732338438d58f4a25d1df85f82d8ab7cecabec7c9b519f0aac3c4fb41314de3edd0e69485b9d88247f0a9237dfd6cd46fecaa232402f31a5a
SSDEEP

192:i9ImOiOJ3iY3/PJ9hZNZdWPnIXOjclchRatfRatOoaHeio64yuaWDmeI:i9ImOF9iYjDN3BOhQRQX9iT/4ieI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b83faf4f31e32d2682235be8760c868_JaffaCakes118

Files

0b83faf4f31e32d2682235be8760c868_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3542475a00ba3f6620261e28c3773fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
ord616

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ