a0ba9f12f247147cb90a151f1bc40bb8_JaffaCakes118 | Triage

Sharing

General

Target

a0ba9f12f247147cb90a151f1bc40bb8_JaffaCakes118
Size

109KB
MD5

a0ba9f12f247147cb90a151f1bc40bb8
SHA1

29aeabe93089da46319b4f3a5f95f288ac7c9d74
SHA256

b6f24c149cc710cc7caf4a9ab0cb79ac3c02bcc2c18e8b1865879f5908700c25
SHA512

eb2df8e0c230d7e6d0fa495519d59205e3ea31017dbe47fd770fc9f22605f384bec32747aba2f59f2ed49ee3a7688ed2bf347443e96dab24ca4ef108ed832b9a
SSDEEP

1536:ZPd/1U59ObarvFRPMg3wzILQSXu8F3Qhdlu/IXRH5a8MAb2DJBXcqpYjI3P07wWm:9HEO4vF1MqFLQGKdl6I6NAOv8I38vvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0ba9f12f247147cb90a151f1bc40bb8_JaffaCakes118

Files

a0ba9f12f247147cb90a151f1bc40bb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9315cf2074e6ee3a5c9d93032a65ede3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord665
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord570
ord100

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ