0bbe6b4f34918e49df76a1dd01aa6baa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bbe6b4f34918e49df76a1dd01aa6baa_JaffaCakes118
Size

16KB
MD5

0bbe6b4f34918e49df76a1dd01aa6baa
SHA1

6da89a048026031f9e8264cf8b16d3b99d61cde4
SHA256

456fff6dfd96816d93551918880c8d7e5a0c186317450cd12683db73720353f0
SHA512

00a5afbcf9c1d98572bd4b0cc3bf374a482b728c97eb54f259a81eefa08094ea64d10354982991a29133721ab4ed22631e526652ebfcda464fab8ca664a58a0e
SSDEEP

192:ocGF34iQQRFOJH5a4AUGF6gyfTBWlOriE/H:ocO4iQQRFODaeG93lU/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbe6b4f34918e49df76a1dd01aa6baa_JaffaCakes118

Files

0bbe6b4f34918e49df76a1dd01aa6baa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1db5eadd0ffb98748ec0d4a3a648331d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ