0cdb8d8207a75eb635b27b3a06c7dce8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cdb8d8207a75eb635b27b3a06c7dce8_JaffaCakes118
Size

352KB
MD5

0cdb8d8207a75eb635b27b3a06c7dce8
SHA1

de1a0b0048e59a2e7e3726eed57725eed52fce3e
SHA256

803ca8b412ba9960cd3143f13d6ea1fc54711a142ebcc625852c52cd684b9f25
SHA512

95502fc13a4cd66863f9ba6b62cec9964781d7d087714c698728b3784ce25b30fb2014b83b7c9e2af42e050bf077e677063c0f9e3b1ce24b1b64568983ff333f
SSDEEP

6144:dl4DBt23gAr6OwzmMTdlZnnz7Sq9jCEVa5KPo8ZxSQ:x36VvBuoNP7ZIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cdb8d8207a75eb635b27b3a06c7dce8_JaffaCakes118

Files

0cdb8d8207a75eb635b27b3a06c7dce8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bf19ea6787a25c07dae467b0070e280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord619

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ