c0fdc5af5174d35f82df0f3d00a93964_JaffaCakes118 | Triage

Sharing

General

Target

c0fdc5af5174d35f82df0f3d00a93964_JaffaCakes118
Size

156KB
MD5

c0fdc5af5174d35f82df0f3d00a93964
SHA1

2a9ed53a60e3c1c6da2aea6842a908cbd061ce36
SHA256

0e6db43f9784a033651a0f9744925160a77be6ee8575e792dbd3a3147e980b89
SHA512

a16e23451c7f18e94a791ff6e7e8742c8750553a72dc4d916c16c19409980156469150c14e8461d32f9c2d7f090709871de7155c94bc9aa27bddee8a79b84ac9
SSDEEP

1536:fY6Fq+LHReN5qNMin5FI4gVeHAQWK6aStFdwRRurNos1LbLkOVRH:w60+NTuHMRkpFLhH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0fdc5af5174d35f82df0f3d00a93964_JaffaCakes118

Files

c0fdc5af5174d35f82df0f3d00a93964_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88f7f2ad99f6046dad51d292e3ca21d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord517
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord527
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord616
ord618

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ