0f8df4b2ae8f12e6e23a707aa64382f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f8df4b2ae8f12e6e23a707aa64382f1_JaffaCakes118
Size

28KB
MD5

0f8df4b2ae8f12e6e23a707aa64382f1
SHA1

17c26bc64a60616d4b5ec93057fe91d6eba125e2
SHA256

d8ffab7d3657d7e246b87741821ed81f7d7be55cd968160e825aefdd07b1012b
SHA512

647cc5f0ebfd48669055d68891ca12eee27f154f92247fda5317499421a55b40198be9fbf55d1d7c71c05b242a533fef09bf8be0efee976ce5c4732cf903b091
SSDEEP

192:oU5GCPlyf8+CBhRJ6VP30hM1cc94u7sK+cwWL9E+5BmBdO7RE621cc94u:jGVfzshR84iGKsKAWL9EAB+60G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8df4b2ae8f12e6e23a707aa64382f1_JaffaCakes118

Files

0f8df4b2ae8f12e6e23a707aa64382f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ