0d02d2a95faae412615d171507b39aa0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d02d2a95faae412615d171507b39aa0_JaffaCakes118
Size

36KB
MD5

0d02d2a95faae412615d171507b39aa0
SHA1

511848751d3256abc17640feb9e6917412db1637
SHA256

888660c62c9a04082e8b2b37528cab5727171158fb035af1936e0e3a5416906e
SHA512

1bb1a9c2a79433bb2c32146919024109b3499e7f14aec3f5fb5ee68d32da8a67e847f3d10bb161d6a33dd948d3964750f32c4d4f54e7bc938369dddef936478b
SSDEEP

768:FdJlpHXkGiXYy+byNLepC+ZUpDC+IyMLC61L:FdJKYPtGIyMLC6t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d02d2a95faae412615d171507b39aa0_JaffaCakes118

Files

0d02d2a95faae412615d171507b39aa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7b7f28264469b19fcf41cc5c87edb7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ProcCallEngine
ord537
ord648
ord681
ord685
ord100
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE