0f1c47e9de85ecc4e8a95630c8185751_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1c47e9de85ecc4e8a95630c8185751_JaffaCakes118
Size

12KB
MD5

0f1c47e9de85ecc4e8a95630c8185751
SHA1

b53c823fd10daf6c0060d841b08de6d86b7cf491
SHA256

7c019579e57e8193522944e15707a333df9717418c46f3ab1fc78a65fb862493
SHA512

62459cc6605a3bac41d8644d605d815e48bc80885326825863d3e44deddfb135fb5b763bef11a5d97cc586754358f17ce413a53fbb3f22fec5d55ada7b159c2d
SSDEEP

48:ygXjYFGgm26UwLlaqsUqQIGlLsBPx23ueKPOA/oglwR0EfK2:3MYO6UwLlpSdeK2T0Ei2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1c47e9de85ecc4e8a95630c8185751_JaffaCakes118

Files

0f1c47e9de85ecc4e8a95630c8185751_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bad91fed9dab58de0ae1f264dc5a5268

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ