0f644bb658ff4aac38f8ca0ad8125ab8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f644bb658ff4aac38f8ca0ad8125ab8_JaffaCakes118
Size

120KB
MD5

0f644bb658ff4aac38f8ca0ad8125ab8
SHA1

86e75dc703a3a817f46705b1227b80d0c1f0dc56
SHA256

32e26e96e974e0536bd9e95573b99cc69e9bf3bbd3e138b8469bc6a7baca341e
SHA512

137ccec255436d2fffd8bdc60aa4d93a6685429ea199dd67b0fe28a672798bc03dd32c0af4eb59db9c1a0ff54a89a60a4539bc460b6adf50ee71eada58c44705
SSDEEP

1536:auwni2hWJM6GMj4fK8rUZDyDQBBTOdIKoidCeNDCgAyoP5HIQs:auuDwJM6GMj4fR9DQ2dCgeB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f644bb658ff4aac38f8ca0ad8125ab8_JaffaCakes118

Files

0f644bb658ff4aac38f8ca0ad8125ab8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

deb867e864ffcaa9689be5d0dc4f99a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord100
ord616
ord581

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ