0bc6374ad4263f525b8985f00c28c62e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bc6374ad4263f525b8985f00c28c62e_JaffaCakes118
Size

70KB
MD5

0bc6374ad4263f525b8985f00c28c62e
SHA1

31933a60dd699c618216fe46e5dbf968c6dad030
SHA256

2cadd7c0960a94e7b9d7e3ef7cc415aac1f65396818a1e51d8ff0c1b33e2a8c1
SHA512

34ae2e5e4786e638143327a24c294c5988316ba20295ed6f747f519f7d1362a523c8cc0f1f57814e1bc815f114dcd1b615aacd3fb0548164c0ca01379f760f19
SSDEEP

768:F7F4xLUj/yo7vVcv/eym2vjr+TM5KTDiE91uXU5yC7w:FyU/ywZ2vhcT91uXU5yYw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc6374ad4263f525b8985f00c28c62e_JaffaCakes118

Files

0bc6374ad4263f525b8985f00c28c62e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ