0ccbf298ca14a0b78a7ffb7ce2594087_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ccbf298ca14a0b78a7ffb7ce2594087_JaffaCakes118
Size

84KB
MD5

0ccbf298ca14a0b78a7ffb7ce2594087
SHA1

eaaaa71aa173ab34dcd2040285b2d3158176f83b
SHA256

09ca37b28a7e09fece3e01bef8e4f933c6c092444f6ef3c2945dc261434168b6
SHA512

04b536558587c29b4025faa05a25f2992071f29b9e78b3e7de31610bf7ab747a53100ee8cdfccc4dbfeb6d98639f5bf4afdd22fabdfe22d7d010f0cee7c2ef3b
SSDEEP

768:zWh813NbRfBykuQVnH5qmki/ZNKTiycnv0kftGH91anvMnxRJf93qJvXWFCUxelo:zjjXdvX0H91avchV6JQCUwljFf+NDHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ccbf298ca14a0b78a7ffb7ce2594087_JaffaCakes118

Files

0ccbf298ca14a0b78a7ffb7ce2594087_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3718be4ca963513b7f4189b38be4061f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord644
ord100

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ