0efbd1f8bce073a9076ec7bc91b183fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0efbd1f8bce073a9076ec7bc91b183fa_JaffaCakes118
Size

296KB
MD5

0efbd1f8bce073a9076ec7bc91b183fa
SHA1

8d12028ff5783396b8622024188ef037393668c6
SHA256

4673f3db749a720c2926e4646f83ce1f700b58ad49dc031afe0f06fa8bf55ea3
SHA512

6536cda5bb5e55cafda08f5af1d095725c9194682fbc08f580678344561a0e36b0c5e624c8d686ab543991617d53c275f377101f7df1f69ffcd7459857478d5c
SSDEEP

3072:c/VGEay5VjJQoGfcrpWjzaCF3HOjLyV1S0ZTHc4do+4mAtkjuVDLFK+YYU:yVqxisRkKotkjyXs+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0efbd1f8bce073a9076ec7bc91b183fa_JaffaCakes118

Files

0efbd1f8bce073a9076ec7bc91b183fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e59daa932f0469d4f36b673938ef52de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord596
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ