0bd920005d2f6a34c5a2c876312bb649_JaffaCakes118 | Triage

Sharing

General

Target

0bd920005d2f6a34c5a2c876312bb649_JaffaCakes118
Size

216KB
MD5

0bd920005d2f6a34c5a2c876312bb649
SHA1

ce32ad33aba69b1560051ffdcef5debd671b60bf
SHA256

cb96a663c66cd0be92906311d25abb092869e37b66a098300585e6bdcebfbcdc
SHA512

af1f289833c04079748400ae760c8605fcc7d8e23d0c8437fb6c7426dada450c969ea5546cf6b21c139cf120459f55e9e8b7dd5e328776787ba36905cc8ca28d
SSDEEP

3072:Rpx/qW5pgjHmQuP8QBnskbanivFbMEb9J8buaVkUSS:Dxt5jaawbuaKUSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bd920005d2f6a34c5a2c876312bb649_JaffaCakes118

Files

0bd920005d2f6a34c5a2c876312bb649_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5f1fd4304f9dffe833b43de2acdfa36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord645
ord648
ord570
ord685
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ