b0926f6c52c4bb0a5e5b85d7d306ca74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0926f6c52c4bb0a5e5b85d7d306ca74_JaffaCakes118
Size

212KB
MD5

b0926f6c52c4bb0a5e5b85d7d306ca74
SHA1

497151c6aba721ad31f244f61ab0b56ce93a3b90
SHA256

1f6ff0031f2626102cd6c7072237ff05223c0e9246e83a5cdb49835d1ce3cfab
SHA512

fbdb8ed027a10596d705adc532a627dd13543e363727e3943e695e9288cf17216b36305fae91c97b50d03fff9acd50674e0cf26098b8b275913cebf14d4d41ca
SSDEEP

6144:oc9kfgNnCYP40Xf/9PJR8WjN4VRNuX/hYH:3WfgIanlJ2YGVG/qH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0926f6c52c4bb0a5e5b85d7d306ca74_JaffaCakes118

Files

b0926f6c52c4bb0a5e5b85d7d306ca74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b97f8102fb0f98e36dbbfdb2abe41235

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord647
ord685
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ