ff0cbd1ff05d68ae0ba41829cf3dada5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff0cbd1ff05d68ae0ba41829cf3dada5_JaffaCakes118
Size

248KB
MD5

ff0cbd1ff05d68ae0ba41829cf3dada5
SHA1

ae3fae0a0198058d0af248ad2022046e189adc0e
SHA256

148500647d3071a96c03602775b7b1ebd0d217cae7ea75d77fff77ebc07b565c
SHA512

2083614be4c622f122bfe9deb0b0ce7ae5a6f8386833498347ee79d7fdf5f29d007387b37441d6be6bdd113c26ee1a2743691f026cdd86804d4bef367d0d3ca1
SSDEEP

3072:RfMytn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4d:R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0cbd1ff05d68ae0ba41829cf3dada5_JaffaCakes118

Files

ff0cbd1ff05d68ae0ba41829cf3dada5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e97ba881ba79f930f9e1a07a9e65ee97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100
ord616

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ