f0bf18eb96ff054087561321c67a677c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0bf18eb96ff054087561321c67a677c_JaffaCakes118
Size

1.6MB
MD5

f0bf18eb96ff054087561321c67a677c
SHA1

9a0f1d39387ba7bff7069afbf467ccd5fba11659
SHA256

b073a5bf32a4a02bf086d7214c885f5069a18d80fe2e31cb8427743078f6ec92
SHA512

b3ceeb498e52bf0c3ffd31fa8709b061ca9e7ddf579de62f0ffb62295dcb1354e07e2f2bbba61a9c15d361920204f98d87a2bc30a1d087e1d73dfb499657e192
SSDEEP

12288:UjbHRnJL/bUZbH+xCAtn+x/lGPlly+x/lGPllSiQp1DDFUBVUM31RgV:UjbHZBbUbH+xD+ElltEllSsxL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0bf18eb96ff054087561321c67a677c_JaffaCakes118

Files

f0bf18eb96ff054087561321c67a677c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b219d88d6cb6814b5054d77cc73e7032

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord519
ord595
ord596
ord598
ord520
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord531
ProcCallEngine
ord645
ord570
ord571
ord100
ord612
ord617
ord619

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ