f0a1d864dca2fb364494097a29e7e7c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0a1d864dca2fb364494097a29e7e7c1_JaffaCakes118
Size

88KB
MD5

f0a1d864dca2fb364494097a29e7e7c1
SHA1

0498e5b2ac2d77730fe09060ea19c4f455e86a0a
SHA256

25de709588c200315a7183f01b7b34227a33a21f07e64f94f0df1264c4e0f5cd
SHA512

ff602f0e7197810a244db8da8e3503187df0f9828a588e5d861c9602ba36cb48d1bb876f2329c92d4fce9fccc98ccb558bc74258bbe4344766abd9c4d0c0c7cf
SSDEEP

1536:gsiC4iRQBO5zjH2PfO/zNbup/EbUjtjZjgjWjpjy0UQh18TDa:ECxRpPN0USaTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a1d864dca2fb364494097a29e7e7c1_JaffaCakes118

Files

f0a1d864dca2fb364494097a29e7e7c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d08d703f8ec81dff9da409d9a6a4c9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord518
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
ord670
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord617
ord619

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ