0c7bd4738b317ba15c8dd25ca83ec634_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c7bd4738b317ba15c8dd25ca83ec634_JaffaCakes118
Size

252KB
MD5

0c7bd4738b317ba15c8dd25ca83ec634
SHA1

b51491585fda9ab351a064f7f3260d91873042bb
SHA256

706e696492a439cbff3e68a333db79406b8ffb169c4dd3ef12ffce23765b4020
SHA512

bb969ba51543eb8a36e77b7dab4295347be89c41d1646e232c10a43e228d1e661e68c5f27c09ebffad9c30b30df2256c80be929e653b78315846300a6878eb28
SSDEEP

3072:WetsAONsxas9wXPbdxaLKpvjiurpMxKwkpm5njg6rA0d0AOVd89eDB29MhJ37nQX:WovCssJFjiX9rI8g294J37BkX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c7bd4738b317ba15c8dd25ca83ec634_JaffaCakes118

Files

0c7bd4738b317ba15c8dd25ca83ec634_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59ed28728de3d5234fe89be704262fa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord666
ord669
ord593
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord681
ord576
ord100
ord616
ord617
ord618

Sections

.text
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ