cf0912ef69bbceac0273fe7e1c62bf96_JaffaCakes118 | Triage

Sharing

General

Target

cf0912ef69bbceac0273fe7e1c62bf96_JaffaCakes118
Size

376KB
MD5

cf0912ef69bbceac0273fe7e1c62bf96
SHA1

0bb5adad759d3e077ee17c489aaa8c24d7705803
SHA256

46450541c81708475d6560c4f3d1eddb956cb6289c6c6686d8b8dcf6ef491f28
SHA512

290d8b8c03aa4835b2698330a43302d1bbaaeb78cdbb60c66918c128b64e18d25ac6013db71158f9fd678bfdc561bb9a4ff6a238782d01616617caebb290acea
SSDEEP

6144:AYclO7VNWBNWlwOKu09B1zkAeoZ6ax8v9pRrc3LmiC:AYYO7Yu0L1FeJdvtQLmiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf0912ef69bbceac0273fe7e1c62bf96_JaffaCakes118

Files

cf0912ef69bbceac0273fe7e1c62bf96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53c0e36a7ef3659ca99b6d2e4905b29b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord586
ord589
ord698
MethCallEngine
ord516
ord518
ord519
ord183
ord629
ord552
ord553
ord660
ord667
ord591
ord595
ord598
ord706
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord672
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord530
ord717
ord533
ord186
ord535
VarPtr
ord539
ord570
ord648
ord680
ord575
ord100
ord610
ord613
ord617
ord618
ord619
ord542
ord545
ord548
ord549
ord581

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ