0f81516e24c87c4a8fc1096fe66b028b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f81516e24c87c4a8fc1096fe66b028b_JaffaCakes118
Size

2.8MB
MD5

0f81516e24c87c4a8fc1096fe66b028b
SHA1

873668c3aad386c8bcf783e00093c8eaa73c7c1e
SHA256

2c705df36e88d11215f9b2a67ac8a9c5b3037a8e81e9c4e277c5893c54cdf29d
SHA512

bca0643521ce326d60dd6c1ee017fe1caf8b251b56f00e4260baf2308e4f5f1047b9d24172a92d8e6b4f0b4d653a22c012906363974b26ea704a9dbfe22dae01
SSDEEP

12288:H5kMDwsoOSii+LVBiXnqWxBygZiMC8C3IJke2XN/DHcho:YsOii+JbW3ygsskPpD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f81516e24c87c4a8fc1096fe66b028b_JaffaCakes118

Files

0f81516e24c87c4a8fc1096fe66b028b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6439ccb892f285ee92ab885871e1dbe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ