c0f3709f58d488a1df049f5e3a02366d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0f3709f58d488a1df049f5e3a02366d_JaffaCakes118
Size

88KB
MD5

c0f3709f58d488a1df049f5e3a02366d
SHA1

d00972aa4b5cf24a694c2355a9573e9da76a7a60
SHA256

c1365120226155104f83630dec4aad80602c073b80faabecd553b65c8b2bb52e
SHA512

97102f90e3f8048a32eab3b8fe2aeaeeccb4ffafe077fb72d8e6c2a34d28a62a2ee904e3a5ce5589ee70a21f6de7ffa35b1c8dc00de980e334698343e449f05c
SSDEEP

768:AVudhFJ28PgMYk84F5m9zxwpAiLzvsbw633v33OLJgwhqPGdSksG+YRkXIoDvjwf:AilPjYk8Whj6nvn8tyk4+k4obeZMBcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0f3709f58d488a1df049f5e3a02366d_JaffaCakes118

Files

c0f3709f58d488a1df049f5e3a02366d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfc1bf42e005b0f4e781d0e21a970e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618
ord581

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ