0eb2864c0b939d442425adcbc3fe22c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eb2864c0b939d442425adcbc3fe22c1_JaffaCakes118
Size

200KB
MD5

0eb2864c0b939d442425adcbc3fe22c1
SHA1

45113de62a7bbe4deee26ac2010f0122b27a0cb0
SHA256

c55022e0f7566235dc9fd2be55c67718790574210613efb18fcd2909776c42af
SHA512

b751ac8f2ebd1e59d827c868cc0068e8c89b2ffd815e4b65710d61e745d9ff9189967b0ba37173fe210e0f83a7f1dd6b242ccf5c0d02d706e700333ee5529fea
SSDEEP

3072:PCXTo/0YxL0tQ9nLHbB9WPliBs2HWWEakGJm9w4M:PCud4QxL7B9WPli+yWWEazjb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eb2864c0b939d442425adcbc3fe22c1_JaffaCakes118

Files

0eb2864c0b939d442425adcbc3fe22c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67c6cea725dad28f2fc079da02446256

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord593
ord300
ord594
ord598
ord306
ord520
ord631
ord709
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord647
ord573
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ