0ec964dc84e5a8505db121a9a8d5060b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec964dc84e5a8505db121a9a8d5060b_JaffaCakes118
Size

140KB
MD5

0ec964dc84e5a8505db121a9a8d5060b
SHA1

0873b642d2ad9b9fbe022679bcf2f990a84d64f5
SHA256

8784879ecc992f25f744cb564771bae592240ba63e2090c7589059244719cf48
SHA512

a05385656e6eac28ea79f56728b539062c2751d6968d93aa37362abdf132a4a7752514b12233d0c94f7bd4b1da4d51f5bfe91da4679e348c8b1ff01830ea1772
SSDEEP

3072:KTg3wo0y4fXWbml91Qm8CNQqlSFyxrBe5C:8u4fcmv1d/Qq8FAiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec964dc84e5a8505db121a9a8d5060b_JaffaCakes118

Files

0ec964dc84e5a8505db121a9a8d5060b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c420b11e80fc4c50502adb67e44254a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord595
ord596
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE