ab0c9077518dbbb06817f5a66c3b4dfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab0c9077518dbbb06817f5a66c3b4dfe_JaffaCakes118
Size

24KB
MD5

ab0c9077518dbbb06817f5a66c3b4dfe
SHA1

d17cc2f4026251435ba79ddaa08c7e09de03f679
SHA256

a4032d4f396f9ebc0d8a7b565764873fc6854200efa11649c7a080bd881409d7
SHA512

bfa0bb4f4982759a9b71d35f56c6d3774b1a289ad165ad6bf52e96791222d1eb962a93d054066c11d611e3498b68bedce60924ceec38c81f3254746be05db745
SSDEEP

192:Lj3ID5mQP2H6wP8/SUZa8zmBjFgiDePvcZxQlEF2H6wP8/SUZa8D:/I5Pw+SUbm9GCePvcZxQlEFPw+SUL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab0c9077518dbbb06817f5a66c3b4dfe_JaffaCakes118

Files

ab0c9077518dbbb06817f5a66c3b4dfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd74eca2857126a1f7730827e8ff4d08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord593
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ